Lucene search

K
cve[email protected]CVE-2010-1216
HistoryMar 30, 2010 - 11:30 p.m.

CVE-2010-1216

2010-03-3023:30:00
CWE-94
web.nvd.nist.gov
15
cve-2010-1216
php
remote file inclusion
notsopureedit
vulnerability
templates
template.php
register_globals

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%

PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
notsopureeditnotsopureeditRange1.4.1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%

Related for CVE-2010-1216