6.5
CVE-2008-5673
- EPSS 0.96%
- Veröffentlicht 19.12.2008 01:52:02
- Zuletzt bearbeitet 16.06.2026 23:00:46
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phparanoid ≫ Phparanoid Version <= 0.3
Phparanoid ≫ Phparanoid Version0.1
Phparanoid ≫ Phparanoid Version0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.96% | 0.568 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
http://secunia.com/advisories/28847
http://sourceforge.net/project/shownotes.php?release_id=575358
https://exchange.xforce.ibmcloud.com/vulnerabilities/40516