Lucene search

K
nvd[email protected]NVD:CVE-2008-2878
HistoryJun 26, 2008 - 5:41 p.m.

CVE-2008-2878

2008-06-2617:41:00
web.nvd.nist.gov
4

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.6

Confidence

High

EPSS

0.006

Percentile

78.8%

Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter.

Affected configurations

Nvd
Node
yektawebacademic_web_toolsRange1.4.2.8
OR
yektawebacademic_web_toolsRange1.4.3.1
VendorProductVersionCPE
yektawebacademic_web_tools*cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.6

Confidence

High

EPSS

0.006

Percentile

78.8%

Related for NVD:CVE-2008-2878