Lucene search
HistoryDec 20, 2005 - 11:03 a.m.
CVE-2005-4424
cve-2005-4424
phpkit
directory traversal
vulnerability
remote code execution
7.3 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
76.9%
Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a … (dot dot) in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpkit:phpkit | phpkit | eq | 1.6.02 |
| phpkit:phpkit | phpkit | eq | 1.6.03 |
| phpkit:phpkit | phpkit | eq | 1.6.1 |
7.3 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
76.9%
Related for CVE-2005-4424