Lucene search

[email protected]NVD:CVE-2008-6814

HistoryMay 28, 2009 - 2:30 p.m.

CVE-2008-6814

2009-05-2814:30:00

CWE-20

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.129 Low

EPSS

Percentile

95.5%

JSON

Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direct request to the file in components/com_simpleboard/, a different vulnerability than CVE-2006-3528.

Affected configurations

NVD

Node

jan_de_graaffcom_simpleboardRange≤1.0.1

jan_de_graaffcom_simpleboardMatch0.9

jan_de_graaffcom_simpleboardMatch0.9.1

jan_de_graaffcom_simpleboardMatch0.9.2

jan_de_graaffcom_simpleboardMatch1.0rc1

jan_de_graaffcom_simpleboardMatch1.0rc2

jan_de_graaffcom_simpleboardMatch1.0rc3

AND

mambomambo

References

www.securityfocus.com/bid/31981

exchange.xforce.ibmcloud.com/vulnerabilities/46223

www.exploit-db.com/exploits/6868

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.129 Low

EPSS

Percentile

95.5%

JSON

Related for NVD:CVE-2008-6814

cvelist3 cve3 prion1 nvd2 nessus1