Lucene search
HistoryFeb 27, 2015 - 2:59 a.m.
CVE-2015-0883
cve-2015-0883
synck graphica
mailform pro
cgi
vulnerability
remote code execution
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.5%
SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
Node
synck_graphicamailform_pro_cgiMatch4.1.4
ORsynck_graphicamailform_pro_cgiMatch4.1.5
Related
jvn
jvn
prion
prion
Code injection
2015-02-27 02:59:00
nvd
nvd
CVE-2015-0883
2015-02-27 02:59:35
cvelist
cvelist
CVE-2015-0883
2015-02-27 02:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.5%
Related for CVE-2015-0883