CVE-2005-2607

2005-08-1704:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.7%

JSON

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null (“%00”) characters.

References

rgod.altervista.org/simply.html

secunia.com/advisories/16273

securitytracker.com/id?1014591

www.phpsimplicity.com/scripts.php?id=3

www.securityfocus.com/bid/14424