返回 CVE 浏览器

CVE-2008-3737

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0510%

EPSS Percentile7.63th

Published2008年8月27日

Last Modified2026年4月23日

Vulnerability Description

Unspecified vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to execute arbitrary PHP scripts, and delete files, read files, and possibly have unknown other impact.

Affected Platforms (CPE)

📦

Spacetag

Lacoodast

<= 2.1.3

📦

System Consultants

La Cooda Wiz

<= 1.4.0

References & Advisories

🔗 http://jvn.jp/en/jp/JVN53886050/index.html

🔗 http://secunia.com/advisories/31574

🔗 http://secunia.com/advisories/31582

🔗 http://wiz.syscon.co.jp/Details.htm

🔗 http://www.securityfocus.com/bid/30791

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/44594

🔗 http://jvn.jp/en/jp/JVN53886050/index.html

🔗 http://secunia.com/advisories/31574

相关漏洞威胁

CVE-2008-37389.1

Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecif...

CVE-2008-37366.0

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceT...

CVE-2008-37394.3

Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3...

CVE-2008-034310.0

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has u...