PT-2005-3577 · Runcms · Runcms

Published 2005-08-24 · Updated 2008-09-05 · CVE-2005-2691

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RunCMS versions 1.2 and earlier

Description The issue allows remote attackers to overwrite arbitrary variables, possibly enabling the execution of arbitrary code, due to the extract function being called with EXTR OVERWRITE on HTTP POST variables in the includes/common.php file.

Recommendations For RunCMS versions 1.2 and earlier, consider modifying the includes/common.php file to avoid using EXTR OVERWRITE when calling the extract function on HTTP POST variables, or apply alternative security measures to prevent variable overwrite attacks.

Fix

Related Identifiers

CVE-2005-2691

Affected Products

Runcms

References · 4

• http://gulftech.org/?node=research&article_id=00094-08192005 · Vendor Advisory
• http://secunia.com/advisories/16514 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2691 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2691 · Note