Lucene search
HistoryApr 23, 2009 - 5:30 p.m.
CVE-2008-6745
cve-2008-6745
blogphp 2.0
remote attackers
administrator privileges
crafted email parameter
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
88.0%
index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.
Affected configurations
Node
blogphpblogphpMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| blogphp:blogphp | blogphp | eq | 2.0 |
Related
nvd
nvd
CVE-2008-6745
2009-04-23 17:30:01
cvelist
cvelist
CVE-2008-6745
2009-04-23 17:00:00
prion
prion
Deserialization of untrusted data
2009-04-23 17:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
88.0%
Related for CVE-2008-6745