6.5
CVE-2004-2538
- EPSS 2.29%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:09:50
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginDirect static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nilesh Dosooye ≫ Phpcodegenie Version <= 3.0.1
Nilesh Dosooye ≫ Phpcodegenie Version1.1
Nilesh Dosooye ≫ Phpcodegenie Version1.4
Nilesh Dosooye ≫ Phpcodegenie Version1.21
Nilesh Dosooye ≫ Phpcodegenie Version3.0_alpha
Nilesh Dosooye ≫ Phpcodegenie Version3.0_beta
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.29% | 0.81 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
http://phpcodegenie.sourceforge.net/phpCodeGenie/docs/ChangeLog.txt
http://secunia.com/advisories/12853
http://securitytracker.com/id?1011911
http://www.osvdb.org/11102
http://www.securityfocus.com/bid/11524
https://exchange.xforce.ibmcloud.com/vulnerabilities/17848