Lucene search
HistorySep 02, 2005 - 11:03 p.m.
CVE-2005-2782
cve-2005-2782
php
remote file inclusion
autolinks pro 2.1
vulnerability
nvd
7.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.055 Low
EPSS
Percentile
93.1%
PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an “ftp://” URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for “http” and “https” URLs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| autolinks:autolinks | autolinks | eq | 2.1 |
Related
nessus
nessus
AutoLinks Pro 'al_initialize.php alpath Parameter Remote File Inclusion
2005-08-29 00:00:00
7.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.055 Low
EPSS
Percentile
93.1%
Related for CVE-2005-2782