PT-2005-1944 · Encapsbb · Encapsbb

Publicado 2005-03-29 · Atualizado 2008-09-05 · CVE-2005-0917

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EncapsBB versions 0.3.2 fixed and possibly other versions

Description The issue allows remote attackers to execute arbitrary PHP code via the root parameter in the index header.php file. This enables attackers to potentially gain control over the system by injecting malicious code.

Recommendations For EncapsBB version 0.3.2 fixed, consider restricting access to the index header.php file until a patch is available. As a temporary workaround, avoid using the root parameter in the index header.php file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0917

Produtos afetados

Encapsbb

Referências · 4

• 🔥 http://securitytracker.com/id?1013569 · Exploit
• http://osvdb.org/15078 · Nota
• http://secunia.com/advisories/14761 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0917 · Nota de Segurança