Lucene search

K
cve[email protected]CVE-2005-0268
HistoryFeb 10, 2005 - 5:00 a.m.

CVE-2005-0268

2005-02-1005:00:00
web.nvd.nist.gov
21
cve-2005-0268
code injection
flatnuke
remote attack
arbitrary execution

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.5%

Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the url_avatar field.

Affected configurations

NVD
Node
flatnukeflatnukeMatch2.5.1
CPENameOperatorVersion
flatnuke:flatnukeflatnukeeq2.5.1

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.5%

Related for CVE-2005-0268