Lucene search

K
cve[email protected]CVE-2008-7180
HistorySep 08, 2009 - 10:30 a.m.

CVE-2008-7180

2009-09-0810:30:01
CWE-20
web.nvd.nist.gov
18
cve-2008-7180
del_query1.php
telephone directory 2008
remote attackers
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.3%

del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request with a modified id variable.

Affected configurations

NVD
Node
rittwick_banerjeetelephone_directory_2008

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.3%

Related for CVE-2008-7180