PT-2005-3459 · Syscp · Syscp

Christopher Kunz · Published 2005-08-16 · Updated 2016-10-18 · CVE-2005-2568

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SysCP versions 1.2.10 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a string containing the code within { and } characters, which are processed by the PHP eval() function.

Recommendations For SysCP versions 1.2.10 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2568

Affected Products

Syscp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-2568 · Security Note
• http://syscp.de/forum/viewtopic.php?t=1772 · Patch
• http://hardened-php.net/advisory_132005.64.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=112352095923614&w=2 · Note