Lucene search

K
cve[email protected]CVE-2005-1868
HistoryJun 09, 2005 - 4:00 a.m.

CVE-2005-1868

2005-06-0904:00:00
CWE-434
web.nvd.nist.gov
30
i-man 0.9
remote attackers
execute arbitrary code
php
file upload

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.8%

I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension.

Affected configurations

NVD
Node
yvesglodti-manRange0.9
CPENameOperatorVersion
yvesglodt:i-manyvesglodt i-manle0.9

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.8%

Related for CVE-2005-1868