5

CVE-2008-6470

EPSS 0.56%
Veröffentlicht 13.03.2009 10:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the (1) mods/messages/getusers.php and (2) mods/abcode/listimg.php files.  NOTE: some of these details are obtained from third party information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Clansphere ≫ Clansphere Version <= 2008

Clansphere ≫ Clansphere Version2007.3.1

Clansphere ≫ Clansphere Version2007.4

Clansphere ≫ Clansphere Version2007.4.1

Clansphere ≫ Clansphere Version2007.4.2

Clansphere ≫ Clansphere Version2007.4.3

Clansphere ≫ Clansphere Version2007.4.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.56%	0.656

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://osvdb.org/48451

http://secunia.com/advisories/31965

Vendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=627530

Patch

http://www.clansphere.net/index/news/view/id/289

Vendor Advisory

http://www.clansphere.net/index/news/view/id/306

Vendor Advisory

http://www.securityfocus.com/bid/31293

https://exchange.xforce.ibmcloud.com/vulnerabilities/45269

https://nvd.nist.gov/vuln/detail/CVE-2008-6470

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-6470

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-6470

EUVD