Lucene search

[email protected]CVE-2005-0380

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0380

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2005

0380

php

remote file inclusion

zeroboard

vulnerability

web server

nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.805 High

EPSS

Percentile

98.3%

JSON

Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code.

CPENameOperatorVersion
zeroboard:zeroboardzeroboardeq4.1_pl5
zeroboard:zeroboardzeroboardeq4.1_pl4
zeroboard:zeroboardzeroboardeq4.1_pl3
zeroboard:zeroboardzeroboardeq4.1_pl2

CPE	Name	Operator	Version
zeroboard:zeroboard	zeroboard	eq	4.1_pl5
zeroboard:zeroboard	zeroboard	eq	4.1_pl4
zeroboard:zeroboard	zeroboard	eq	4.1_pl3
zeroboard:zeroboard	zeroboard	eq	4.1_pl2

References

marc.info/?l=bugtraq&m=110565373407474&w=2

secunia.com/advisories/13769

securitytracker.com/id?1012884

www.osvdb.org/12928

www.osvdb.org/12929

www.osvdb.org/12930

www.osvdb.org/12931

www.osvdb.org/12932

www.securityfocus.com/bid/12206

www.securityfocus.com/bid/12258

exchange.xforce.ibmcloud.com/vulnerabilities/18892

exchange.xforce.ibmcloud.com/vulnerabilities/18893

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.805 High

EPSS

Percentile

98.3%

JSON

Related for CVE-2005-0380

openvas2 nessus1