5

CVE-2005-0828

Exploit
highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from mainfile.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ciamos ≫ Ciamos Version0.9.2_rc1
E-xoops ≫ E-xoops Version1.05r3
Runcms ≫ Runcms Version1.1a
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.18% 0.947
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/14641
Patch
Vendor Advisory
http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf
Vendor Advisory
URL Repurposed
http://marc.info/?l=bugtraq&m=111117241923006&w=2
http://marc.info/?l=bugtraq&m=111125645312693&w=2
http://secunia.com/advisories/14648
Vendor Advisory
http://securitytracker.com/id?1013485
http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt
Exploit
URL Repurposed
http://www.osvdb.org/14890
http://www.securityfocus.com/bid/12848
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/19754