PT-2005-1915 · Double Choco Latte · Double Choco Latte

Publicado 2005-03-24 · Atualizado 2017-07-11 · CVE-2005-0887

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Double Choco Latte versions prior to 0.9.4.3

Description The issue allows remote attackers to execute arbitrary PHP code via the menuAction variable in files such as functions.inc.php or main.php. This is due to code being injected into an eval statement, which can lead to the execution of malicious code.

Recommendations For versions prior to 0.9.4.3, update to version 0.9.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the menuAction variable in the affected files to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0887

Produtos afetados

Double Choco Latte

Referências · 6

• 🔥 https://exploit-db.com/exploits/25271 · Exploit
• http://securitytracker.com/id?1013559 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0887 · Nota de Segurança
• http://secunia.com/advisories/14688 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=315144 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19806 · Nota