CVE-2005-1894

Опубликовано: 09 июн. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker.

Ссылки

http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256
Patch
Product
http://secunia.com/advisories/15603
Broken Link
Patch
Vendor Advisory
http://securitytracker.com/id?1014114
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt
Broken Link
Exploit
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2005/0697
Broken Link
http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256
Patch
Product
http://secunia.com/advisories/15603
Broken Link
Patch
Vendor Advisory
http://securitytracker.com/id?1014114
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt
Broken Link
Exploit
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2005/0697
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:flatnuke:flatnuke:2.5.3:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03465

Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-mjp9-35c3-rjjh

github

больше 4 лет назад