CVE-2008-1541

Sažetak

Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. (dot dot) in the t parameter.

Reference

http://secunia.com/advisories/29478
http://securityreason.com/securityalert/3784
http://www.securityfocus.com/archive/1/490016/100/0/threaded
http://www.securityfocus.com/bid/28425
http://www.vupen.com/english/advisories/2008/0991/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41407
https://www.exploit-db.com/exploits/5304

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	NONE	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:N/A:N

Zadnje važnije ažuriranje

11-10-2018 - 20:35

Objavljeno

28-03-2008 - 18:44