Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0565
cve-2005-0565
nvd
announce module
phpwebsite
remote code execution
security vulnerability
7.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.017 Low
EPSS
Percentile
87.5%
The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.
Related
nessus
nessus
phpWebSite Image Announcement Upload Arbitrary Command Execution
2005-02-25 00:00:00
GLSA-200503-04 : phpWebSite: Arbitrary PHP execution and path disclosure
2005-03-02 00:00:00
cvelist
cvelist
CVE-2005-0565
2005-02-27 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200503-04 (phpwebsite)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200503-04 (phpwebsite)
2008-09-24 00:00:00
gentoo
gentoo
phpWebSite: Arbitrary PHP execution and path disclosure
2005-03-01 00:00:00
7.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.017 Low
EPSS
Percentile
87.5%
Related for CVE-2005-0565