10

CVE-2008-4358

Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Spaw Editor ≫ Spaw Php Version <= 2.0.8
Spaw Editor ≫ Spaw Php Version 1.0
Spaw Editor ≫ Spaw Php Version 1.0 Update rc1
Spaw Editor ≫ Spaw Php Version 1.0 Update rc2
Spaw Editor ≫ Spaw Php Version 1.0.1
Spaw Editor ≫ Spaw Php Version 1.0.2
Spaw Editor ≫ Spaw Php Version 1.0.3
Spaw Editor ≫ Spaw Php Version 1.0.4
Spaw Editor ≫ Spaw Php Version 1.0.5
Spaw Editor ≫ Spaw Php Version 1.0.5a
Spaw Editor ≫ Spaw Php Version 1.0.6
Spaw Editor ≫ Spaw Php Version 1.0.7
Spaw Editor ≫ Spaw Php Version 1.1
Spaw Editor ≫ Spaw Php Version 1.1 Update beta
Spaw Editor ≫ Spaw Php Version 1.1 Update rc1
Spaw Editor ≫ Spaw Php Version 1.2
Spaw Editor ≫ Spaw Php Version 1.2 Update beta
Spaw Editor ≫ Spaw Php Version 1.2 Update beta_2
Spaw Editor ≫ Spaw Php Version 1.2.1
Spaw Editor ≫ Spaw Php Version 1.2.2
Spaw Editor ≫ Spaw Php Version 1.2.3
Spaw Editor ≫ Spaw Php Version 2.0.0
Spaw Editor ≫ Spaw Php Version 2.0.0 Update beta
Spaw Editor ≫ Spaw Php Version 2.0.0 Update rc
Spaw Editor ≫ Spaw Php Version 2.0.1
Spaw Editor ≫ Spaw Php Version 2.0.2
Spaw Editor ≫ Spaw Php Version 2.0.3
Spaw Editor ≫ Spaw Php Version 2.0.4
Spaw Editor ≫ Spaw Php Version 2.0.4.1
Spaw Editor ≫ Spaw Php Version 2.0.5 Update beta
Spaw Editor ≫ Spaw Php Version 2.0.6
Spaw Editor ≫ Spaw Php Version 2.0.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.91% 0.772
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://blog.solmetra.com/2008/09/10/spaw-editor-php-edition-hotfix-release/
Patch
http://secunia.com/advisories/31796
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=625333&group_id=77954
Patch
http://spaw.svn.sourceforge.net/viewvc/spaw/spaw2/trunk/class/theme.class.php?r1=151&r2=359
http://www.securityfocus.com/bid/31185
https://exchange.xforce.ibmcloud.com/vulnerabilities/45104