NVD

Id
68992  
Name
CVE-2005-3330  
Description
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-10-27  
Modified Date
2017-07-10  
Seq
2005-3330  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
356539 68992 CVE-2005-3330 20051025 SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability  View
356540 68992 CVE-2005-3330 20051027 Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote  View
356541 68992 CVE-2005-3330 117  View
356542 68992 CVE-2005-3330 1015104  View
356543 68992 CVE-2005-3330 http://sourceforge.net/project/shownotes.php?release_id=368750  View
356544 68992 CVE-2005-3330 http://sourceforge.net/project/shownotes.php?release_id=375385  View
356545 68992 CVE-2005-3330 15213  View
356546 68992 CVE-2005-3330 ADV-2005-2202  View
356547 68992 CVE-2005-3330 ADV-2005-2335  View
356548 68992 CVE-2005-3330 ADV-2005-2727  View
356549 68992 CVE-2005-3330 snoopy-httpsrequest-command-injection(22874)  View
356550 68992 CVE-2005-3330 https://svn.ampache.org/branches/3.3.1/docs/CHANGELOG  View

Related JVN