Lucene search
HistoryOct 14, 2008 - 10:36 p.m.
CVE-2008-4557
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
High
EPSS
0.047
Percentile
92.7%
plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.
Affected configurations
Node
cutephpcutenewsMatch1.1.1
Related
cve
cve
CVE-2008-4557
2008-10-14 22:36:58
prion
prion
Code injection
2008-10-14 22:36:00
exploitdb
exploitdb
CuteNews 1.1.1 - 'html.php' Remote Code Execution
2008-01-06 00:00:00
canvas
canvas
Immunity Canvas: CUTENEWS_EXEC
2008-10-14 22:36:00
cvelist
cvelist
CVE-2008-4557
2008-10-14 22:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
High
EPSS
0.047
Percentile
92.7%
Related for NVD:CVE-2008-4557