7.5
CVSSv2

CVE-2005-4462

Published: 21/12/2005 Updated: 19/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote malicious users to execute arbitrary code via a URL in the ROOT parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

tolva tolva 0.1.0

Exploits

source: wwwsecurityfocuscom/bid/16000/info Tolva is prone to a remote file-include vulnerability An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process This may help the attacker compromise the application and the underlying system; oth ...