CVE

Id
15378  
CVE No.
CVE-2005-4174  
Status
Candidate  
Description
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used.  
Phase
Assigned (20051211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
120387 15378 CVE-2005-4174 BUGTRAQ:20051125 eFiction <= 2.0 multiple vulnerabilities  View
120388 15378 CVE-2005-4174 URL:http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html  View
120389 15378 CVE-2005-4174 MISC:http://rgod.altervista.org/efiction2_xpl.html  View
120390 15378 CVE-2005-4174 CONFIRM:http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555  View
120391 15378 CVE-2005-4174 BID:15568  View
120392 15378 CVE-2005-4174 URL:http://www.securityfocus.com/bid/15568  View
120393 15378 CVE-2005-4174 SECTRACK:1015273  View
120394 15378 CVE-2005-4174 URL:http://securitytracker.com/id?1015273  View
120395 15378 CVE-2005-4174 SECUNIA:17777  View
120396 15378 CVE-2005-4174 URL:http://secunia.com/advisories/17777  View
120397 15378 CVE-2005-4174 SREASON:206  View

Related JVN