PT-2005-3459 · Syscp · Syscp

Christopher Kunz · Publicado 2005-08-16 · Atualizado 2016-10-18 · CVE-2005-2568

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SysCP versions 1.2.10 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a string containing the code within { and } characters, which are processed by the PHP eval() function.

Recommendations For SysCP versions 1.2.10 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2568

Produtos afetados

Syscp

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-2568 · Nota de Segurança
• http://syscp.de/forum/viewtopic.php?t=1772 · Correção
• http://hardened-php.net/advisory_132005.64.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=112352095923614&w=2 · Nota