CVE-2008-5322

EUVD-2008-5299
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
Affected Products (NVD)
VendorProductVersion
easy-scriptwysi_wiki_wyg
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt
http://secunia.com/advisories/31061
https://exchange.xforce.ibmcloud.com/vulnerabilities/47105
https://www.exploit-db.com/exploits/6042
http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt
http://secunia.com/advisories/31061
https://exchange.xforce.ibmcloud.com/vulnerabilities/47105
https://www.exploit-db.com/exploits/6042