Vulnerability Details CVE-2005-2559
doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restricted shell metacharacters such as ">" and "&" in the eping_host parameter, which is not handled by the validation function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.0%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2005-2559
-
-
cpe:2.3:a:e107:e107:0.600
-
cpe:2.3:a:e107:e107:0.601
-
cpe:2.3:a:e107:e107:0.602
-
cpe:2.3:a:e107:e107:0.603
-
cpe:2.3:a:e107:e107:0.604
-
cpe:2.3:a:e107:e107:0.605
-
cpe:2.3:a:e107:e107:0.606
-
cpe:2.3:a:e107:e107:0.607
-
cpe:2.3:a:e107:e107:0.608
-
cpe:2.3:a:e107:e107:0.609
-
cpe:2.3:a:e107:e107:0.610
-
cpe:2.3:a:e107:e107:0.611
-
cpe:2.3:a:e107:e107:0.612
-
cpe:2.3:a:e107:e107:0.613
-
cpe:2.3:a:e107:e107:0.614
-
cpe:2.3:a:e107:e107:0.615
-
cpe:2.3:a:e107:e107:0.615a
-
cpe:2.3:a:e107:e107:0.616
-
cpe:2.3:a:e107:e107:0.617
-
cpe:2.3:a:e107:e107:0.6171
-
cpe:2.3:a:e107:e107:0.6172
-
cpe:2.3:a:e107:e107:0.6173
-
cpe:2.3:a:e107:e107:0.6174
-
cpe:2.3:a:e107:e107:0.6175
-
-
cpe:2.3:a:e107:e107:0.7.0
-
cpe:2.3:a:e107:e107:0.7.1
-
cpe:2.3:a:e107:e107:0.7.10
-
cpe:2.3:a:e107:e107:0.7.11
-
cpe:2.3:a:e107:e107:0.7.12
-
cpe:2.3:a:e107:e107:0.7.13
-
cpe:2.3:a:e107:e107:0.7.14
-
cpe:2.3:a:e107:e107:0.7.15
-
cpe:2.3:a:e107:e107:0.7.16
-
cpe:2.3:a:e107:e107:0.7.17
-
cpe:2.3:a:e107:e107:0.7.18
-
cpe:2.3:a:e107:e107:0.7.19
-
cpe:2.3:a:e107:e107:0.7.2
-
cpe:2.3:a:e107:e107:0.7.20
-
cpe:2.3:a:e107:e107:0.7.21
-
cpe:2.3:a:e107:e107:0.7.22
-
cpe:2.3:a:e107:e107:0.7.24
-
cpe:2.3:a:e107:e107:0.7.26
-
cpe:2.3:a:e107:e107:0.7.3
-
cpe:2.3:a:e107:e107:0.7.4
-
cpe:2.3:a:e107:e107:0.7.5
-
cpe:2.3:a:e107:e107:0.7.6
-
cpe:2.3:a:e107:e107:0.7.7
-
cpe:2.3:a:e107:e107:0.7.8
-
cpe:2.3:a:e107:e107:0.7.9
-
cpe:2.3:a:e107:e107:1.0.1
-
cpe:2.3:a:e107:e107:1.0.2
-
cpe:2.3:a:e107:e107:1.0.3
-
cpe:2.3:a:e107:e107:1.0.4
-
-
cpe:2.3:a:e107:e107:2.0.0
-
cpe:2.3:a:e107:e107:2.1.1
-
cpe:2.3:a:e107:e107:2.1.2
-
cpe:2.3:a:e107:e107:2.1.4
-
cpe:2.3:a:e107:e107:2.1.7
-
cpe:2.3:a:e107:e107:2.1.8
-
cpe:2.3:a:e107:e107:2.1.9
-
cpe:2.3:a:e107:e107:2.2.0
-
cpe:2.3:a:e107:e107:2.2.1
-
cpe:2.3:a:e107:e107:2.3.0
-
cpe:2.3:a:e107:e107:2.3.1
-
cpe:2.3:a:e107:e107:2.3.2
-
cpe:2.3:a:e107:e107:2.3.3