CVE-2005-2687 - PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php

Published Aug 24, 2005

7.5

HIGH

CVSS 2.0

EPSS 1.66%

Description

PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://rgod.altervista.org/save_yourself_from_savewebportal34.html
x_refsource_MISCExploitVendor Advisory
http://secunia.com/advisories/16522
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2688
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28182
vdb-entryx_refsource_XF

Link	Providers	Tags
http://rgod.altervista.org/save_yourself_from_savewebportal34.html		x_refsource_MISCExploitVendor Advisory
http://secunia.com/advisories/16522		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2688		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28182		vdb-entryx_refsource_XF