Lucene search
HistoryAug 16, 2005 - 4:00 a.m.
CVE-2005-2568
cve
2005
2568
eval injection
syscp
template engine
remote code execution
nvd
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.4%
Eval injection vulnerability in the template engine for SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via a string containing the code within “{” and “}” (curly bracket) characters, which are processed by the PHP eval function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| syscp_team:syscp | syscp team syscp | eq | 1.2.10 |
Related
cve
cve
CVE-2007-0849
2007-02-08 18:28:00
prion
prion
Directory traversal
2007-02-08 18:28:00
nessus
nessus
SysCP < 1.2.11 Multiple Script Command Execution Vulnerabilities
2005-08-10 00:00:00
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.4%
Related for CVE-2005-2568