VulnerabilityModified

CVE-2008-5283

Google Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors related to the delall action to index.php.

MEDIUM 6.4EPSS 1.78%

Does this matter?

Lower severity and a low EPSS score (1.78%). Track it; it rarely justifies an emergency change on its own.

Description

Google Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors related to the delall action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. CVE analysis suggests that the most recent version as of 20081128 is 1.2, and the File Upload Manager does not have a "delall" action.

CVSS 2.0: 6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
EPSS: 1.78% probability · 77th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: ghh/google hack honeypot file upload manager
Source: cve@mitre.org

References

http://www.securityfocus.com/bid/27877Exploit
http://www.securityfocus.com/bid/27877Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.