Lucene search

MitreCVE-2005-0513

HistoryFeb 23, 2005 - 5:00 a.m.

CVE-2005-0513

2005-02-2305:00:00

mitre

web.nvd.nist.gov

cve-2005-0513

php

remote file inclusion

vulnerability

email this entry

pmachine pro

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.027

Percentile

90.6%

JSON

PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086.

Affected configurations

Nvd

Node

pmachinepmachine_proMatch2.4

VendorProductVersionCPE
pmachinepmachine_pro2.4cpe:2.3:a:pmachine:pmachine_pro:2.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pmachine	pmachine_pro	2.4	cpe:2.3:a:pmachine:pmachine_pro:2.4:::::::*

References

marc.info/?l=full-disclosure&m=110883604531802&w=2

www.securityfocus.com/bid/12597

www.securityfocus.com/bid/15473

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.027

Percentile

90.6%

JSON

Related for CVE-2005-0513