NVD

Id
69052  
Name
CVE-2005-3390  
Description
The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-11-01  
Modified Date
2016-12-07  
Seq
2005-3390  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
357006 69052 CVE-2005-3390 HPSBMA02159  View
357007 69052 CVE-2005-3390 oval:org.mitre.oval:def:10537  View
357008 69052 CVE-2005-3390 RHSA-2006:0549  View
357009 69052 CVE-2005-3390 132  View
357010 69052 CVE-2005-3390 1015129  View
357011 69052 CVE-2005-3390 http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm  View
357012 69052 CVE-2005-3390 FLSA:166943  View
357013 69052 CVE-2005-3390 GLSA-200511-08  View
357014 69052 CVE-2005-3390 http://www.hardened-php.net/advisory_202005.79.html  View
357015 69052 CVE-2005-3390 http://www.hardened-php.net/globals-problem  View
357016 69052 CVE-2005-3390 MDKSA-2005:213  View
357017 69052 CVE-2005-3390 SUSE-SR:2005:027  View
357018 69052 CVE-2005-3390 OpenPKG-SA-2005.027  View
357019 69052 CVE-2005-3390 http://www.php.net/release_4_4_1.php  View
357020 69052 CVE-2005-3390 RHSA-2005:831  View
357021 69052 CVE-2005-3390 RHSA-2005:838  View
357022 69052 CVE-2005-3390 20051031 Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability  View
357023 69052 CVE-2005-3390 SUSE-SA:2005:069  View
357024 69052 CVE-2005-3390 15250  View
357025 69052 CVE-2005-3390 ADV-2005-2254  View
357026 69052 CVE-2005-3390 ADV-2006-4320  View
357027 69052 CVE-2005-3390 USN-232-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62456 JVNDB-2005-000658 PHP の extract() および import_request_variables() 関数におけるグローバル変数を上書きされる脆弱性 ------------ CVE-2005-3390 14594 CVE-2005-3390 69052 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000658.html 2005-10-31 2007-04-01 View