CVE

Id
12065  
CVE No.
CVE-2005-0859  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to (1) headlines.php or (2) news.php. NOTE: some sources have reported the "dir" parameter as being affected; however, this is likely a cut-and-paste error from the wrong section of the original vulnerability report. Also, the news.php version was later reported to be in 1.12 through 1.14.  
Phase
Assigned (20050325)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
86513 12065 CVE-2005-0859 MILW0RM:2009  View
86514 12065 CVE-2005-0859 URL:http://milw0rm.com/exploits/2009  View
86515 12065 CVE-2005-0859 BID:12857  View
86516 12065 CVE-2005-0859 URL:http://www.securityfocus.com/bid/12857  View
86517 12065 CVE-2005-0859 BID:18411  View
86518 12065 CVE-2005-0859 URL:http://www.securityfocus.com/bid/18411  View
86519 12065 CVE-2005-0859 OSVDB:14925  View
86520 12065 CVE-2005-0859 URL:http://www.osvdb.org/14925  View
86521 12065 CVE-2005-0859 OSVDB:14926  View
86522 12065 CVE-2005-0859 URL:http://www.osvdb.org/14926  View
86523 12065 CVE-2005-0859 SECTRACK:1013486  View
86524 12065 CVE-2005-0859 URL:http://securitytracker.com/id?1013486  View
86525 12065 CVE-2005-0859 SECUNIA:14670  View
86526 12065 CVE-2005-0859 URL:http://secunia.com/advisories/14670  View
86527 12065 CVE-2005-0859 XF:czarnews-multiple-scripts-file-include(19765)  View
86528 12065 CVE-2005-0859 URL:http://xforce.iss.net/xforce/xfdb/19765  View
86529 12065 CVE-2005-0859 XF:czarnews-news-config-file-include(27733)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63169 JVNDB-2004-000511 DeleGate における複数のバッファオーバーフローの脆弱性 DeleGate において、 scanf()、 strncpy() 関数、および文字列終端の指定などの可変長文字列の処理に関連する複数の箇所に過度に長い文字列を含む意図的な Proxy リクエストを送られることにより、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-0861 12065 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000511.html  View