CVE-2008-5322

Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
easy-scriptwysi_wiki_wyg
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt
http://secunia.com/advisories/31061
https://exchange.xforce.ibmcloud.com/vulnerabilities/47105
https://www.exploit-db.com/exploits/6042
http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt
http://secunia.com/advisories/31061
https://exchange.xforce.ibmcloud.com/vulnerabilities/47105
https://www.exploit-db.com/exploits/6042