exploitDog

CVE-2005-0680

Опубликовано: 07 мар. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.

Ссылки

http://marc.info/?l=bugtraq&m=110996056601719&w=2
http://secunia.com/advisories/14513
Patch
Vendor Advisory
http://www.stadtaus.com/forum/p-5895.html
http://www.stadtaus.com/forum/t-1579.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=110996056601719&w=2
http://secunia.com/advisories/14513
Patch
Vendor Advisory
http://www.stadtaus.com/forum/p-5895.html
http://www.stadtaus.com/forum/t-1579.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:stadtaus:download_center_lite:*:*:*:*:*:*:*:*

Версия до 1.5 (включая)

EPSS

Процентиль: 86%

0.02788

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7h8w-wpmq-rqgp

github

почти 4 года назад

PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.

EPSS

Процентиль: 86%

0.02788

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other