Vulnerability Details CVE-2005-1325
set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.034
EPSS Ranking 87.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://cvs.sourceforge.net/viewcvs.py/phpmyvisites/phpmyvisites/include/set_lang.php?r1=1.5&r2=1.6
- http://marc.info/?l=bugtraq&m=111454298603060&w=2
- http://www.securityfocus.com/bid/13370
- http://cvs.sourceforge.net/viewcvs.py/phpmyvisites/phpmyvisites/include/set_lang.php?r1=1.5&r2=1.6
- http://marc.info/?l=bugtraq&m=111454298603060&w=2
- http://www.securityfocus.com/bid/13370
Products affected by CVE-2005-1325
-
cpe:2.3:a:matthieu_aubry:phpmyvisites:1.3