Lucene search

[email protected]CVE-2008-6773

HistoryApr 29, 2009 - 6:30 p.m.

CVE-2008-6773

2009-04-2918:30:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2008-6773

static code injection

userplace 1.0.2

php code execution

security vulnerability

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.1%

JSON

Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the (1) fav1_url, (2) fav1_name, (3) fav2_url, (4) fav2_name, (5) fav3_url, (6) fav3_name, (7) fav4_url, (8) fav4_name, (9) fav5_url, or (10) fav5_name parameters.

Affected configurations

NVD

Node

peterselieyourplaceRange≤1.0.2

peterselieyourplaceMatch1.0

peterselieyourplaceMatch1.0.1

CPENameOperatorVersion
peterselie:yourplacepeterselie yourplacele1.0.2
peterselie:yourplacepeterselie yourplaceeq1.0
peterselie:yourplacepeterselie yourplaceeq1.0.1

CPE	Name	Operator	Version
peterselie:yourplace	peterselie yourplace	le	1.0.2
peterselie:yourplace	peterselie yourplace	eq	1.0
peterselie:yourplace	peterselie yourplace	eq	1.0.1

References

secunia.com/advisories/33272

www.securityfocus.com/bid/32971

exchange.xforce.ibmcloud.com/vulnerabilities/47562

www.exploit-db.com/exploits/7545

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.1%

JSON

Related for CVE-2008-6773

nvd1 cvelist1 prion1