Lucene search

[email protected]CVE-2005-3571

HistoryNov 16, 2005 - 7:42 a.m.

CVE-2005-3571

2005-11-1607:42:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2005-3571

php

file inclusion vulnerability

codegrrl

phpcalendar

phpclique

phpcurrently

phpfanbase

phpquotes

remote attackers

register_globals

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.6%

JSON

PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, © PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected.

Affected configurations

NVD

Node

codegrrlphpcalendarRange≤1.0

codegrrlphpcliqueRange≤1.0

codegrrlphpcurrentlyRange≤2.0

codegrrlphpfanbaseRange≤2.2

codegrrlphpquotesRange≤1.0

CPENameOperatorVersion
codegrrl:phpcalendarcodegrrl phpcalendarle1.0
codegrrl:phpcliquecodegrrl phpcliquele1.0
codegrrl:phpcurrentlycodegrrl phpcurrentlyle2.0
codegrrl:phpfanbasecodegrrl phpfanbasele2.2
codegrrl:phpquotescodegrrl phpquotesle1.0

CPE	Name	Operator	Version
codegrrl:phpcalendar	codegrrl phpcalendar	le	1.0
codegrrl:phpclique	codegrrl phpclique	le	1.0
codegrrl:phpcurrently	codegrrl phpcurrently	le	2.0
codegrrl:phpfanbase	codegrrl phpfanbase	le	2.2
codegrrl:phpquotes	codegrrl phpquotes	le	1.0

References

marc.info/?l=bugtraq&m=113199214723444&w=2

secunia.com/advisories/17542

securityreason.com/securityalert/176

securitytracker.com/id?1015206

www.securityfocus.com/bid/15417

www.securityfocus.com/bid/21664

www.vupen.com/english/advisories/2005/2402

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.6%

JSON

Related for CVE-2005-3571

nvd1 nessus1 cvelist1