Published: 05/06/2006 Updated: 18/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 790

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Ovidentia

Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote malicious users to execute arbitrary PHP code via a URL in the babInstallPath parameter in (1) index.php, (2) topman.php, (3) approb.php, (4) vacadmb.php, (5) vacadma.php, (6) vacadm.php, (7) statart.php, (8) search.php, (9) posts.php, (10) options.php, (11) login.php, (12) frchart.php, (13) flbchart.php, (14) fileman.php, (15) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional unspecified PHP scripts. NOTE: the utilit.php vector is already covered by CVE-2005-1964.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cantico ovidentia 5.8.0

source: wwwsecurityfocuscom/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process ...

source: wwwsecurityfocuscom/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver pro ...

source: wwwsecurityfocuscom/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process ...

source: wwwsecurityfocuscom/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver p ...

source: wwwsecurityfocuscom/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver proce ...

source: wwwsecurityfocuscom/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver ...

source: wwwsecurityfocuscom/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver ...

source: wwwsecurityfocuscom/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserv ...

NVD-CWE-Other http://www.securityfocus.com/bid/18232 http://www.osvdb.org/27209 http://www.osvdb.org/27211 http://www.osvdb.org/27212 http://www.osvdb.org/27213 http://www.osvdb.org/27214 http://www.osvdb.org/27215 http://www.osvdb.org/27216 http://www.osvdb.org/27217 http://www.osvdb.org/27218 http://www.osvdb.org/27219 http://www.osvdb.org/27220 http://www.osvdb.org/27221 http://www.osvdb.org/27222 http://www.osvdb.org/27223 http://www.osvdb.org/27224 http://www.osvdb.org/27225 http://www.osvdb.org/27229 http://www.osvdb.org/27226 http://www.osvdb.org/27227 http://www.osvdb.org/27228 http://securityreason.com/securityalert/1033 https://exchange.xforce.ibmcloud.com/vulnerabilities/26981 http://www.securityfocus.com/archive/1/459572/100/0/threaded http://www.securityfocus.com/archive/1/456893/100/200/threaded http://www.securityfocus.com/archive/1/435590/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27949/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook