I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension.
References
| Link | Resource |
|---|---|
| http://secunia.com/advisories/15558/ | Broken Link Patch Vendor Advisory |
| http://sourceforge.net/project/shownotes.php?release_id=331422 | Broken Link Patch |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/20857 | Third Party Advisory VDB Entry |
| http://secunia.com/advisories/15558/ | Broken Link Patch Vendor Advisory |
| http://sourceforge.net/project/shownotes.php?release_id=331422 | Broken Link Patch |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/20857 | Third Party Advisory VDB Entry |
Configurations
History
20 Nov 2024, 23:58
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://secunia.com/advisories/15558/ - Broken Link, Patch, Vendor Advisory | |
| References | () http://sourceforge.net/project/shownotes.php?release_id=331422 - Broken Link, Patch | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/20857 - Third Party Advisory, VDB Entry |
26 Jan 2024, 19:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | (SECUNIA) http://secunia.com/advisories/15558/ - Broken Link, Patch, Vendor Advisory | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/20857 - Third Party Advisory, VDB Entry | |
| References | (CONFIRM) http://sourceforge.net/project/shownotes.php?release_id=331422 - Broken Link, Patch | |
| CPE | cpe:2.3:a:i-man:i-man:0.7:*:*:*:*:*:*:* cpe:2.3:a:i-man:i-man:0.5:*:*:*:*:*:*:* cpe:2.3:a:i-man:i-man:0.3:*:*:*:*:*:*:* cpe:2.3:a:i-man:i-man:0.6:*:*:*:*:*:*:* cpe:2.3:a:i-man:i-man:0.4:*:*:*:*:*:*:* cpe:2.3:a:i-man:i-man:0.2:*:*:*:*:*:*:* cpe:2.3:a:i-man:i-man:0.8:*:*:*:*:*:*:* |
cpe:2.3:a:yvesglodt:i-man:*:*:*:*:*:*:*:* |
| CWE | CWE-434 |
Information
Published : 2005-06-09 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2005-1868
Mitre link : CVE-2005-1868
CVE.ORG link : CVE-2005-1868
JSON object : View
Products Affected
yvesglodt
- i-man
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type
