Lucene search
HistoryJun 09, 2005 - 4:00 a.m.
CVE-2005-1876
cve-2005-1876
cutenews
code injection
remote attackers
arbitrary php code
template file injection
8.2 High
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
61.2%
Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template (.tpl) file.
Affected configurations
Node
cutephpcutenewsRange≤1.3.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| cutephp:cutenews | cutephp cutenews | le | 1.3.6 |
8.2 High
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
61.2%
Related for CVE-2005-1876