CVE-2005-0887

Опубликовано: 24 мар. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.

Ссылки

http://secunia.com/advisories/14688
Patch
Vendor Advisory
http://securitytracker.com/id?1013559
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=315144
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19806
http://secunia.com/advisories/14688
Patch
Vendor Advisory
http://securitytracker.com/id?1013559
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=315144
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19806

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:michael_dean:double_choco_latte:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:michael_dean:double_choco_latte:0.9.4:*:*:*:*:*:*:*

cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.2:*:*:*:*:*:*:*

cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07111

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0887

debian

почти 21 год назад

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allo ...

GHSA-5wj3-8v9f-vjph

github

почти 4 года назад