CVE-2005-2154

Опубликовано: 06 июл. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter.

Ссылки

http://seclists.org/lists/bugtraq/2005/Jul/0009.html
Exploit
Vendor Advisory
http://securitytracker.com/id?1014373
Exploit
http://www.securityfocus.com/bid/14127
Exploit
http://seclists.org/lists/bugtraq/2005/Jul/0009.html
Exploit
Vendor Advisory
http://securitytracker.com/id?1014373
Exploit
http://www.securityfocus.com/bid/14127
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:osticket:osticket_sts:1.2:*:*:*:*:*:*:*

cpe:2.3:a:osticket:osticket_sts:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:osticket:osticket_sts:1.3_beta:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02435

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-2154

debian

около 21 года назад

PHP local file inclusion vulnerability in (1) view.php and (2) open.ph ...

GHSA-g2hv-fr8c-5pq5

github

больше 4 лет назад