Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0775
cve-2005-0775
misc.php
photopost php
remote attackers
email
administrator
security vulnerability
nvd
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.1%
The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator.
| CPE | Name | Operator | Version |
|---|---|---|---|
| photopost:photopost_php_pro | photopost photopost php pro | eq | 5.0_rc3 |
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.1%
Related for CVE-2005-0775