7.5
CVE-2005-0887
- EPSS 2.74%
- Veröffentlicht 24.03.2005 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:11:59
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginEval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Michael Dean ≫ Double Choco Latte Version0.9.3
Michael Dean ≫ Double Choco Latte Version0.9.4
Michael Dean ≫ Double Choco Latte Version0.9.4.2
Michael Dean ≫ Double Choco Latte Version0.9.4.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.74% | 0.842 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/14688
http://securitytracker.com/id?1013559
http://sourceforge.net/project/shownotes.php?release_id=315144
https://exchange.xforce.ibmcloud.com/vulnerabilities/19806