CVE

Id
12387  
CVE No.
CVE-2005-1181  
Status
Candidate  
Description
** DISPUTED ** NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS 2.4 allows remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remote web server that contains the code. NOTE: the vendor has disputed this issue, saying that loader.php first requires the "ariadne.inc" file, which defines the $ariadne variable, and thus it cannot be modified by an attacker. In addition, CVE personnel have partially verified the dispute via source code inspection of Ariadne 2.4 as available on July 5, 2005.  
Phase
Assigned (20050419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
89028 12387 CVE-2005-1181 OSVDB:15549  View
89029 12387 CVE-2005-1181 URL:http://www.osvdb.org/15549  View
89030 12387 CVE-2005-1181 SECTRACK:1013721  View
89031 12387 CVE-2005-1181 URL:http://securitytracker.com/id?1013721  View
89032 12387 CVE-2005-1181 XF:ariadne-loaderphp-file-include(20611)  View

Related JVN