NVD

Id
69915  
Name
CVE-2005-4317  
Description
Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modification, which allows remote attackers to use the _SERVER[REMOTE_ADDR] parameter to (1) conduct cross-site scripting (XSS) attacks in the stats module or (2) execute arbitrary code via an eval injection attack in the wrapper option in index2.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-17  
Modified Date
2011-03-07  
Seq
2005-4317  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
361100 69915 CVE-2005-4317 http://rgod.altervista.org/limbo1042_xpl.html  View
361101 69915 CVE-2005-4317 255  View
361102 69915 CVE-2005-4317 1015364  View
361103 69915 CVE-2005-4317 20051214 LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / remote code execution  View
361104 69915 CVE-2005-4317 15871  View
361105 69915 CVE-2005-4317 ADV-2005-2932  View

Related JVN