NVD

Id
4147  
Name
CVE-2008-4319  
Description
fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-09-29  
Modified Date
2009-08-19  
Seq
2008-4319  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26478 4147 CVE-2008-4319 6567  View
26479 4147 CVE-2008-4319 20080925 Fwd: Returned post for bugtraq@securityfocus.com  View
26480 4147 CVE-2008-4319 31415  View
26481 4147 CVE-2008-4319 librafilemanager-fileadmin-security-bypass(45423)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49579 JVNDB-2008-004889 Libra File Manager の fileadmin.php における任意のファイルを変更される脆弱性 Libra File Manager の fileadmin.php には、認証を回避される、任意のファイルを読まれる、任意のファイルを変更される、および任意のディレクトリを一覧にされる脆弱性が存在します。 CVE-2008-4319 34432 CVE-2008-4319 4147 6.4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004889.html 2008-09-29 2012-09-25 View