high7.5Public exploit code
CVE-2005-0680
PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by m…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Download Center Lite (DCL) 1.5 - Remote File Inclusion2005-03-10 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110996056601719&w=2
- http://secunia.com/advisories/14513
- http://www.stadtaus.com/forum/p-5895.html
- http://www.stadtaus.com/forum/t-1579.html
- http://marc.info/?l=bugtraq&m=110996056601719&w=2
- http://secunia.com/advisories/14513
- http://www.stadtaus.com/forum/p-5895.html
- http://www.stadtaus.com/forum/t-1579.html