Lucene search

K
cvelistMitreCVELIST:CVE-2005-2691
HistoryAug 24, 2005 - 4:00 a.m.

CVE-2005-2691

2005-08-2404:00:00
mitre
www.cve.org
6
runcms
remote attackers
arbitrary code
http post variables
security vulnerability

AI Score

6.9

Confidence

Low

EPSS

0.014

Percentile

86.5%

includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code.

AI Score

6.9

Confidence

Low

EPSS

0.014

Percentile

86.5%

Related for CVELIST:CVE-2005-2691