ID |
CVE-2005-0862
|
Summary |
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php. |
References |
|
Vulnerable Configurations |
|
CVSS |
Base: | 7.5 (as of 19-10-2018 - 15:31) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-Other |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
PARTIAL |
PARTIAL |
PARTIAL |
|
cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
refmap
via4
|
bid | 12817 | bugtraq | 20070410 PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities | misc | | osvdb | | sectrack | 1013434 | secunia | 14600 | xf | phpopenchat-file-include(19721) |
|
Last major update |
19-10-2018 - 15:31 |
Published |
02-05-2005 - 04:00 |
Last modified |
19-10-2018 - 15:31 |