CVE-2005-1876

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-1876
Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template (.tpl) file.

4.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 3.4 / Impact : 6.4

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://marc.info/?l=bugtraq&m=111773528322711&w=2 Third Party Advisory
http://secunia.com/advisories/15594 Broken Link
http://www.osvdb.org/17030 Broken Link
http://marc.info/?l=bugtraq&m=111773528322711&w=2 Third Party Advisory
http://secunia.com/advisories/15594 Broken Link
http://www.osvdb.org/17030 Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:58

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=111773528322711&w=2 - Third Party Advisory () http://marc.info/?l=bugtraq&m=111773528322711&w=2 - Third Party Advisory
References () http://secunia.com/advisories/15594 - Broken Link () http://secunia.com/advisories/15594 - Broken Link
References () http://www.osvdb.org/17030 - Broken Link () http://www.osvdb.org/17030 - Broken Link

13 Feb 2024, 16:19

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-94
CPE cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:* cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*
CVSS v2 : 4.6
v3 : unknown 		v2 : 4.4
v3 : unknown
References () http://marc.info/?l=bugtraq&m=111773528322711&w=2 - () http://marc.info/?l=bugtraq&m=111773528322711&w=2 - Third Party Advisory
References () http://secunia.com/advisories/15594 - () http://secunia.com/advisories/15594 - Broken Link
References () http://www.osvdb.org/17030 - () http://www.osvdb.org/17030 - Broken Link
Information

Published : 2005-06-09 04:00

Updated : 2024-11-20 23:58

NVD link : CVE-2005-1876

Mitre link : CVE-2005-1876

CVE.ORG link : CVE-2005-1876

JSON object : View

Products Affected

cutephp

  • cutenews
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')