CVE

Id
15628  
CVE No.
CVE-2005-4424  
Status
Candidate  
Description
Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00.  
Phase
Assigned (20051220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
122541 15628 CVE-2005-4424 BUGTRAQ:20051105 Advisory 21/2005: Multiple vulnerabilities in PHPKIT  View
122542 15628 CVE-2005-4424 URL:http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html  View
122543 15628 CVE-2005-4424 MISC:http://www.hardened-php.net/advisory_212005.80.html  View
122544 15628 CVE-2005-4424 BID:15354  View
122545 15628 CVE-2005-4424 URL:http://www.securityfocus.com/bid/15354  View
122546 15628 CVE-2005-4424 OSVDB:20562  View
122547 15628 CVE-2005-4424 URL:http://www.osvdb.org/20562  View
122548 15628 CVE-2005-4424 SECUNIA:17479  View
122549 15628 CVE-2005-4424 URL:http://secunia.com/advisories/17479  View
122550 15628 CVE-2005-4424 SREASON:157  View
122551 15628 CVE-2005-4424 URL:http://securityreason.com/securityalert/157  View
122552 15628 CVE-2005-4424 XF:phpkit-avatar-file-include(23014)  View

Related JVN