high7.5Public exploit code
CVE-2005-0887
Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) func…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Double Choco Latte 0.9.3/0.9.4 - 'main.php' Arbitrary PHP Code Execution2005-03-24 · webapps · php · Verified
Impact
Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael Dean | Double Choco Latte | Versions 0.9.3, 0.9.4, 0.9.4.2, 0.9.4.3 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/14688
- http://securitytracker.com/id?1013559
- http://sourceforge.net/project/shownotes.php?release_id=315144
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19806
- http://secunia.com/advisories/14688
- http://securitytracker.com/id?1013559
- http://sourceforge.net/project/shownotes.php?release_id=315144
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19806