Lucene search
MitreCVELIST:CVE-2005-0647HistoryMar 04, 2005 - 5:00 a.m.
CVE-2005-0647
2005-03-0405:00:00
mitre
www.cve.org
1
admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.
Related
exploitdb
exploitdb
paNews 2.0b4 - Remote Admin Creation SQL Injection
2005-03-08 00:00:00
nessus
nessus
paNews admin_setup.php Multiple Parameter Arbitrary PHP Code Injection
2005-02-23 00:00:00
paNews 2.0.4b Multiple Input Validation Vulnerabilities
2005-03-18 00:00:00
nvd
nvd
CVE-2005-0647
2005-05-02 04:00:00
cve
cve
CVE-2005-0647
2005-05-02 04:00:00