PT-2005-1936 · Tkai · Tkai'S Shoutbox

Corryl · Published 2005-03-29 · Updated 2016-10-18 · CVE-2005-0909

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TKai's Shoutbox (affected versions not specified)

Description A remote file inclusion issue in the shoutact.php file of TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0909

Affected Products

Tkai'S Shoutbox

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-0909 · Security Note
• http://securityfocus.com/bid/12914 · Note
• http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html · Note
• http://marc.info/?l=full-disclosure&m=111202260908735&w=2 · Note