Lucene search
HistoryApr 08, 2009 - 10:30 a.m.
CVE-2008-6665
cve-2008-6665
ananta cms
change.php
code injection
vulnerability
nvd
7.6 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.8%
change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.
Affected configurations
Node
anantasoftananta_cmsMatch1.0b5
| CPE | Name | Operator | Version |
|---|---|---|---|
| anantasoft:ananta_cms | anantasoft ananta cms | eq | 1.0b5 |
Related
prion
prion
Code injection
2009-04-08 10:30:00
cvelist
cvelist
CVE-2008-6665
2009-04-08 10:00:00
nvd
nvd
CVE-2008-6665
2009-04-08 10:30:00
7.6 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.8%
Related for CVE-2008-6665