Lucene search

PRIOn knowledge basePRION:CVE-2008-3568

HistoryAug 10, 2008 - 8:41 p.m.

Path traversal

2008-08-1020:41:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.7%

JSON

Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UNAK-CMS 1.5.5 allows remote attackers to include and execute arbitrary local files via a full pathname in the Dirroot parameter, a different vulnerability than CVE-2006-4890.1.

CPENameOperatorVersion
unak-cmseq1.5.5

CPE	Name	Operator	Version
	unak-cms	eq	1.5.5

References

securityreason.com/securityalert/4123

www.securityfocus.com/archive/1/495090/100/0/threaded

www.securityfocus.com/bid/30533

exchange.xforce.ibmcloud.com/vulnerabilities/44212

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.7%

JSON

Related for PRION:CVE-2008-3568