Lucene search
HistoryFeb 19, 2009 - 4:30 p.m.
CVE-2008-6172
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0.007
Percentile
81.0%
Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter.
Affected configurations
Node
weberrrwcardsMatch3.0.11
joomlajoomla
Related
prion
prion
Directory traversal
2009-02-19 16:30:00
cvelist
cvelist
CVE-2008-6172
2009-02-19 16:00:00
nuclei
nuclei
Joomla! Component RWCards 3.0.11 - Local File Inclusion
2021-08-15 23:23:06
exploitdb
exploitdb
Joomla! Component RWCards 3.0.11 - Local File Inclusion
2008-10-23 00:00:00
cve
cve
CVE-2008-6172
2009-02-19 16:30:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0.007
Percentile
81.0%
Related for NVD:CVE-2008-6172