Lucene search

K
nvd[email protected]NVD:CVE-2008-6271
HistoryFeb 25, 2009 - 11:30 a.m.

CVE-2008-6271

2009-02-2511:30:00
CWE-22
web.nvd.nist.gov
2

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

Directory traversal vulnerability in index.php in TBmnetCMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a … (dot dot) in the content parameter.

Affected configurations

NVD
Node
tbmnettbmnetcmsMatch1.0

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

Related for NVD:CVE-2008-6271