CVE-2008-3677

Published Aug 14, 2008

Last updated 7 years ago

Overview

Description
Directory traversal vulnerability in includes/events_application_top.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors.
Source
cve@mitre.org
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
6.8
Impact score
6.4
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-22

Evaluator

Comment
Additional sources found during analysis: http://xforce.iss.net/xforce/xfdb/44426 http://www.openfreeway.org/home.html
Impact
-
Solution
-

Configurations