7.5
CVE-2005-0887
- EPSS 7.11%
- Veröffentlicht 24.03.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginEval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Michael Dean ≫ Double Choco Latte Version0.9.3
Michael Dean ≫ Double Choco Latte Version0.9.4
Michael Dean ≫ Double Choco Latte Version0.9.4.2
Michael Dean ≫ Double Choco Latte Version0.9.4.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.11% | 0.911 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|