CVE-2005-0565

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

cve-2005-0565

nvd

announce module

phpwebsite

remote code execution

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.7%

JSON

The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.

Affected configurations

NVD

Node

phpwebsitephpwebsiteMatch0.9.0

phpwebsitephpwebsiteMatch0.9.1

phpwebsitephpwebsiteMatch0.9.2

phpwebsitephpwebsiteMatch0.9.2.1

phpwebsitephpwebsiteMatch0.9.3

phpwebsitephpwebsiteMatch0.9.3.1

phpwebsitephpwebsiteMatch0.9.3.2

phpwebsitephpwebsiteMatch0.9.3.3

phpwebsitephpwebsiteMatch0.9.3.4

phpwebsitephpwebsiteMatch0.10.0

CPENameOperatorVersion
phpwebsite:phpwebsitephpwebsiteeq0.9.0
phpwebsite:phpwebsitephpwebsiteeq0.9.1
phpwebsite:phpwebsitephpwebsiteeq0.9.2
phpwebsite:phpwebsitephpwebsiteeq0.9.2.1
phpwebsite:phpwebsitephpwebsiteeq0.9.3
phpwebsite:phpwebsitephpwebsiteeq0.9.3.1
phpwebsite:phpwebsitephpwebsiteeq0.9.3.2
phpwebsite:phpwebsitephpwebsiteeq0.9.3.3
phpwebsite:phpwebsitephpwebsiteeq0.9.3.4
phpwebsite:phpwebsitephpwebsiteeq0.10.0

CPE	Name	Operator	Version
phpwebsite:phpwebsite	phpwebsite	eq	0.9.0
phpwebsite:phpwebsite	phpwebsite	eq	0.9.1
phpwebsite:phpwebsite	phpwebsite	eq	0.9.2
phpwebsite:phpwebsite	phpwebsite	eq	0.9.2.1
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3.1
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3.2
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3.3
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3.4
phpwebsite:phpwebsite	phpwebsite	eq	0.10.0