CVE-2005-3571
N/A
N/A
Summary
PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://securitytracker.com/id?1015206
- http://www.securityfocus.com/bid/15417
- http://secunia.com/advisories/17542
- http://marc.info/?l=bugtraq&m=113199214723444&w=2
- http://www.vupen.com/english/advisories/2005/2402
- http://www.securityfocus.com/bid/21664
- http://securityreason.com/securityalert/176
References
- http://securitytracker.com/id?1015206
- http://www.securityfocus.com/bid/15417
- http://secunia.com/advisories/17542
- http://marc.info/?l=bugtraq&m=113199214723444&w=2
- http://www.vupen.com/english/advisories/2005/2402
- http://www.securityfocus.com/bid/21664
- http://securityreason.com/securityalert/176
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.