high7.5Public exploit code
CVE-2005-0305
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Siteman 1.1 - User Database Privilege Escalation (2)2005-01-19 · webapps · php · Verified
- Siteman 1.1 - User Database Privilege Escalation (1)2005-01-19 · webapps · php · Verified
Impact
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siteman | Siteman | Versions 1.1.9, 1.1.10 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110627350616949&w=2
- http://marc.info/?l=bugtraq&m=110643320814371&w=2
- http://securitytracker.com/id?1012951
- http://www.osvdb.org/13131
- http://www.securityfocus.com/bid/12304
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18998
- http://marc.info/?l=bugtraq&m=110627350616949&w=2
- http://marc.info/?l=bugtraq&m=110643320814371&w=2
- http://securitytracker.com/id?1012951
- http://www.osvdb.org/13131
- http://www.securityfocus.com/bid/12304
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18998