Lucene search
MitreCVE-2005-2540HistoryAug 10, 2005 - 4:00 a.m.
CVE-2005-2540
2005-08-1004:00:00
mitre
web.nvd.nist.gov
27
vulnerability
flatnuke
crlf injection
remote execution
php
ascii
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
8
Confidence
High
EPSS
0.01
Percentile
84.0%
CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via an ASCII char 13 (carriage return) in the signature field, which is injected into a PHP script without a preceding comment character, which can then be executed by a direct request.
Affected configurations
Node
flatnukeflatnukeMatch2.5.5
Related
cvelist
cvelist
CVE-2005-2540
2005-08-10 04:00:00
nvd
nvd
CVE-2005-2540
2005-08-10 04:00:00
exploitdb
exploitdb
Flatnuke 2.5.5 - Remote Code Execution
2005-08-08 00:00:00
nessus
nessus
FlatNuke < 2.5.6 Multiple Remote Vulnerabilities
2005-08-08 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
8
Confidence
High
EPSS
0.01
Percentile
84.0%
Related for CVE-2005-2540