NVD

Id
3077  
Name
CVE-2008-3194  
Description
Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) langpref, (2) file, (3) blogpost, or (4) cat parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-16  
Modified Date
2011-03-07  
Seq
2008-3194  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
19575 3077 CVE-2008-3194 3996  View
19576 3077 CVE-2008-3194 http://www.bugreport.ir/index_48.htm  View
19577 3077 CVE-2008-3194 6074  View
19578 3077 CVE-2008-3194 http://www.pluck-cms.org/releasenotes.php#4.5.2  View
19579 3077 CVE-2008-3194 30218  View
19580 3077 CVE-2008-3194 ADV-2008-2104  View
19581 3077 CVE-2008-3194 pluck-predefinedvariables-file-include(43741)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50712 JVNDB-2008-006022 pluck の data/inc/themes/predefined_variables.php におけるディレクトリトラバーサルの脆弱性 pluck の data/inc/themes/predefined_variables.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-3194 33307 CVE-2008-3194 3077 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006022.html 2008-07-16 2012-12-20 View