CVE-2008-3268
Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names.
Does this matter?
Lower severity and a low EPSS score (1.86%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.86% probability · 78th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- brickhost/phpscheduleit
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/31147Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=614202
- http://www.securityfocus.com/bid/30300
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43900
- http://secunia.com/advisories/31147Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=614202
- http://www.securityfocus.com/bid/30300
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43900
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.