CVE-2005-3335

Опубликовано: 27 окт. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.

Ссылки

http://bugs.mantisbt.org/changelog_page.php
Patch
http://secunia.com/advisories/16506
http://secunia.com/advisories/16818
Exploit
Patch
Vendor Advisory
http://secunia.com/advisories/17362
http://secunia.com/advisories/17654
http://secunia.com/secunia_research/2005-46/advisory/
Exploit
Patch
Vendor Advisory
http://securityreason.com/securityalert/121
http://securitytracker.com/id?1015110
http://www.debian.org/security/2005/dsa-905
http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml
http://www.securityfocus.com/bid/15212
http://www.securityfocus.com/bid/15227
http://www.vupen.com/english/advisories/2005/2221
https://exchange.xforce.ibmcloud.com/vulnerabilities/22886
http://bugs.mantisbt.org/changelog_page.php
Patch
http://secunia.com/advisories/16506
http://secunia.com/advisories/16818
Exploit
Patch
Vendor Advisory
http://secunia.com/advisories/17362
http://secunia.com/advisories/17654
http://secunia.com/secunia_research/2005-46/advisory/
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.0697

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-3335

ubuntu

почти 20 лет назад

CVE-2005-3335

debian

почти 20 лет назад

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php ...

GHSA-c299-g72j-qp3x

github

больше 3 лет назад

EPSS

Процентиль: 91%

0.0697

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other