CVE-2005-3554

Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:phpkit:phpkit:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:phpkit:phpkit:1.6.1:rc2:*:*:*:*:*:*
cpe:2.3:a:phpkit:phpkit:1.6.02:*:*:*:*:*:*:*
cpe:2.3:a:phpkit:phpkit:1.6.03:*:*:*:*:*:*:*

History

No history.

Information

Published : 2005-11-16 07:42

Updated : 2024-02-04 16:52


NVD link : CVE-2005-3554

Mitre link : CVE-2005-3554

CVE.ORG link : CVE-2005-3554


JSON object : View

Products Affected

phpkit

  • phpkit
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')