CVE

Id
11885  
CVE No.
CVE-2005-0679  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code. NOTE: it was later reported that 2.4 is also affected.  
Phase
Assigned (20050307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
85164 11885 CVE-2005-0679 BUGTRAQ:20070727 Friend Script 2.5 - 2.4 Remote File İnclude  View
85165 11885 CVE-2005-0679 URL:http://www.securityfocus.com/archive/1/archive/1/474954/100/0/threaded  View
85166 11885 CVE-2005-0679 MISC:http://www.stadtaus.com/forum/t-1578.html  View
85167 11885 CVE-2005-0679 MISC:http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/  View
85168 11885 CVE-2005-0679 CONFIRM:http://www.stadtaus.com/forum/t-1579.html  View
85169 11885 CVE-2005-0679 OSVDB:14628  View
85170 11885 CVE-2005-0679 URL:http://www.osvdb.org/14628  View
85171 11885 CVE-2005-0679 SECTRACK:1013390  View
85172 11885 CVE-2005-0679 URL:http://securitytracker.com/id?1013390  View
85173 11885 CVE-2005-0679 XF:tellafriend-scriptroot-file-include(19630)  View

Related JVN