CVE-2005-1965

{"id": "CVE-2005-1965", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-06-16T04:00:00.000", "references": [{"url": "http://list.broadpool.com/pipermail/siteframe-announce/2005-June/000020.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/15657", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1014150", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/17246", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/13928", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20973", "source": "cve@mitre.org"}, {"url": "http://list.broadpool.com/pipermail/siteframe-announce/2005-June/000020.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/15657", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1014150", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/17246", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/13928", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20973", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter."}], "lastModified": "2024-11-20T23:58:30.657", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11C9072B-3924-484F-B4D6-BA7AD54900F9"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE12AB0C-B029-4F47-86CA-B675F9389E22"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6140BA1F-CF72-4C84-969E-7D34B760AF7D"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B661F2A1-0CD3-40B3-82CB-7DEF8C6482D5"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CB8CDBC-F6F6-4184-B467-A6677715861D"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AB1D793-93A8-4FD7-8CE4-61DE726C3CF4"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19503309-E7BF-4C5E-9A66-D24912C61D1B"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.1.8_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "698EC49F-1145-4BBA-96D9-8DC158F0392C"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.1.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97F711E6-CCF1-44C1-96D0-E359E4C81162"}, {"criteria": "cpe:2.3:a:glen_campbell:siteframe:3.2_p5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B8EA76D-34E7-4236-9540-96032CC93935"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}