CVE

Id
14777  
CVE No.
CVE-2005-3571  
Status
Candidate  
Description
PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
113340 14777 CVE-2005-3571 BUGTRAQ:20051113 PHPCalendar (and some more codegrrl.com products) arbitrary code  View
113341 14777 CVE-2005-3571 URL:http://marc.info/?l=bugtraq&m=113199214723444&w=2  View
113342 14777 CVE-2005-3571 BID:15417  View
113343 14777 CVE-2005-3571 URL:http://www.securityfocus.com/bid/15417  View
113344 14777 CVE-2005-3571 BID:21664  View
113345 14777 CVE-2005-3571 URL:http://www.securityfocus.com/bid/21664  View
113346 14777 CVE-2005-3571 VUPEN:ADV-2005-2402  View
113347 14777 CVE-2005-3571 URL:http://www.vupen.com/english/advisories/2005/2402  View
113348 14777 CVE-2005-3571 SECTRACK:1015206  View
113349 14777 CVE-2005-3571 URL:http://securitytracker.com/id?1015206  View
113350 14777 CVE-2005-3571 SECUNIA:17542  View
113351 14777 CVE-2005-3571 URL:http://secunia.com/advisories/17542  View
113352 14777 CVE-2005-3571 SREASON:176  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62475 JVNDB-2005-000677 Mailman の Scrubber.py におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2005-3573 14777 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000677.html  View