|
CVE Reference: CVE-2005-2559
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2005-2559
|
|
Description:
doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restricted shell metacharacters such as ">" and "&" in the eping_host parameter, which is not handled by the validation function.
|
|
CVE Status:
Candidate
|
|
References:
CONFIRM
http://e107plugins.co.uk/news.php
BUGTRAQ
http://marc.theaimsgroup.com/?l=bugtraq&m=112328161319148&w=2
|
|
|
Return to the previous page.
|
