Published: 17/08/2005 Updated: 08/03/2011

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 770

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote malicious users to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ezupload ezupload 2.2

source: wwwsecurityfocuscom/bid/14534/info ezUpload is affected by multiple remote file include vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the pr ...

source: wwwsecurityfocuscom/bid/14534/info ezUpload is affected by multiple remote file include vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privil ...

source: wwwsecurityfocuscom/bid/14534/info ezUpload is affected by multiple remote file include vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileg ...

source: wwwsecurityfocuscom/bid/14534/info ezUpload is affected by multiple remote file include vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the priv ...

NVD-CWE-Other http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt http://www.securiteam.com/exploits/5JP0J15GKU.html http://www.securityfocus.com/bid/14534 http://secunia.com/advisories/16434 http://securitytracker.com/id?1014723 http://www.vupen.com/english/advisories/2005/1379 https://nvd.nist.gov https://www.exploit-db.com/exploits/26143/

CVE-2005-2616

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect