5

CVE-2005-2540

Exploit
CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via an ASCII char 13 (carriage return) in the signature field, which is injected into a PHP script without a preceding comment character, which can then be executed by a direct request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Flatnuke ≫ Flatnuke Version2.5.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.1% 0.925
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=112327238030127&w=2
http://secunia.com/advisories/16330
http://www.rgod.altervista.org/flatnuke.html
Exploit
http://www.osvdb.org/18554
http://www.securityfocus.com/bid/14485
https://exchange.xforce.ibmcloud.com/vulnerabilities/21709