Lucene search

MitreCVE-2008-6719

HistoryApr 13, 2009 - 3:30 p.m.

CVE-2008-6719

2009-04-1315:30:00

CWE-287

mitre

web.nvd.nist.gov

cve-2008-6719

u&m software

event lister

justlistit

directory traversal

vulnerability

nvd

remote attack

authentication

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.017

Percentile

87.7%

JSON

U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) start.php, (2) aktivitet.php, (3) prop_aktivitet.php, (4) kategorier.php, (5) konfig.php, (6) security.php, (7) manual.php, and possibly (8) index.php.

Affected configurations

Nvd

Node

uochmjustlistitMatch1.0

VendorProductVersionCPE
uochmjustlistit1.0cpe:2.3:a:uochm:justlistit:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
uochm	justlistit	1.0	cpe:2.3:a:uochm:justlistit:1.0:::::::*

References

www.securityfocus.com/bid/32166

exchange.xforce.ibmcloud.com/vulnerabilities/46441

www.exploit-db.com/exploits/7034

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.017

Percentile

87.7%

JSON

Related for CVE-2008-6719