PT-2005-1944 · Encapsbb · Encapsbb

Published 2005-03-29 · Updated 2008-09-05 · CVE-2005-0917

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EncapsBB versions 0.3.2 fixed and possibly other versions

Description The issue allows remote attackers to execute arbitrary PHP code via the root parameter in the index header.php file. This enables attackers to potentially gain control over the system by injecting malicious code.

Recommendations For EncapsBB version 0.3.2 fixed, consider restricting access to the index header.php file until a patch is available. As a temporary workaround, avoid using the root parameter in the index header.php file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-0917

Affected Products

Encapsbb

References · 4

• 🔥 http://securitytracker.com/id?1013569 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0917 · Security Note
• http://osvdb.org/15078 · Note
• http://secunia.com/advisories/14761 · Note