VDB
CVE-2008-3195
CVE-2008-3195
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. (dot dot) in the image variable, and execute arbitrary files via unspecified vectors.
EPSS 8.28% · 94.9th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
8.28%
94.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| twiki | twiki | 4.2.1, 0, 4.0 |
| n/a | n/a | * |
Timeline
- Aug 19, 2008 PoC Published
- Sep 17, 2008 CVE Published
- Sep 20, 2008 PoC Published
- Sep 21, 2008 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
References
- 4265 third-party-advisory
- twiki-configure-image-command-execution(45183) vdb
- http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-3195 url
- http://twiki.org/cgi-bin/view/Codev/TWikiRelease04x02x03#4_2_3_Bugfix_Highlights url
- 31849 third-party-advisory
- 6269 exploit
- 31964 third-party-advisory
- http://www.kb.cert.org/vuls/id/RGII-7JEQ7L url
- ADV-2008-2586 vdb
- twiki-configure-directory-traversal(45182) vdb
- VU#362012 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2008-3195 advisory