CVE-2005-3571 | BDVDB-2026-13300 Detail

Description#

PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1015206
http://www.securityfocus.com/bid/15417
http://secunia.com/advisories/17542
http://marc.info/?l=bugtraq&m=113199214723444&w=2
http://www.vupen.com/english/advisories/2005/2402
http://www.securityfocus.com/bid/21664
http://securityreason.com/securityalert/176

Exploit#

No public exploit known

History#

Version 12005-11-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.