Lucene search
HistoryOct 25, 2005 - 4:00 a.m.
CVE-2004-2538
security
code injection
vulnerability
phpcodegenie
remote execution
cve-2004-2538
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.3%
Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer.
Affected configurations
Node
nilesh_dosooyephpcodegenieRange≤3.0.1
ORnilesh_dosooyephpcodegenieMatch1.1
ORnilesh_dosooyephpcodegenieMatch1.4
ORnilesh_dosooyephpcodegenieMatch1.21
ORnilesh_dosooyephpcodegenieMatch3.0_alpha
ORnilesh_dosooyephpcodegenieMatch3.0_beta
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.3%
Related for CVE-2004-2538