NVD

Id
69180  
Name
CVE-2005-3519  
Description
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-11-06  
Modified Date
2017-07-10  
Seq
2005-3519  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
357608 69180 CVE-2005-3519 20051018 Secunia Research: MySource Cross-Site Scripting and File Inclusion  View
357609 69180 CVE-2005-3519 92  View
357610 69180 CVE-2005-3519 1015075  View
357611 69180 CVE-2005-3519 15133  View
357612 69180 CVE-2005-3519 ADV-2005-2132  View
357613 69180 CVE-2005-3519 mysource-multiple-file-include(22772)  View

Related JVN