PT-2005-1936 · Tkai · Tkai'S Shoutbox

Corryl · Publicado 2005-03-29 · Atualizado 2016-10-18 · CVE-2005-0909

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TKai's Shoutbox (affected versions not specified)

Description A remote file inclusion issue in the shoutact.php file of TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-0909

Produtos afetados

Tkai'S Shoutbox

Referências · 4

• http://securityfocus.com/bid/12914 · Nota
• http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0909 · Nota de Segurança
• http://marc.info/?l=full-disclosure&m=111202260908735&w=2 · Nota