CVE-2008-7205

Опубликовано: 11 сент. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary files via vectors related to a template file.

Ссылки

http://osvdb.org/41761
http://secunia.com/advisories/28722
Vendor Advisory
http://virtuemart.net/index.php?option=com_content&task=view&id=275&Itemid=127
Patch
Vendor Advisory
http://www.securityfocus.com/bid/27532
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/40114
http://osvdb.org/41761
http://secunia.com/advisories/28722
Vendor Advisory
http://virtuemart.net/index.php?option=com_content&task=view&id=275&Itemid=127
Patch
Vendor Advisory
http://www.securityfocus.com/bid/27532
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/40114

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:virtuemart:virtuemart:*:*:*:*:*:*:*:*

Версия до 1.0.13a (включая)

cpe:2.3:a:virtuemart:virtuemart:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:virtuemart:virtuemart:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:virtuemart:virtuemart:1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:virtuemart:virtuemart:1.0.9:*:*:*:*:*:*:*

cpe:2.3:a:virtuemart:virtuemart:1.0.10:*:*:*:*:*:*:*

cpe:2.3:a:virtuemart:virtuemart:1.0.11:*:*:*:*:*:*:*

cpe:2.3:a:virtuemart:virtuemart:1.0.12:*:*:*:*:*:*:*

cpe:2.3:a:virtuemart:virtuemart:1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00387

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-pc8w-fxqx-gp37

github

больше 3 лет назад