20050323 Vortex Portalmailing list
http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html CVE-2005-0879
Vortex Portal 2.0 - 'index.php?act' Remote File Inclusion
Record summary
CVE-2005-0879 has a selected CVSS score of 7.5; EIP currently links 2 catalogued exploits.
Description
PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBVortex Portal 2.0 - 'index.php?act' Remote File InclusionExploitDB exploitby Francisco AlissonNot analyzed1 file
ExploitDBVortex Portal 2.0 - 'content.php?act' Remote File InclusionExploitDB exploitby Francisco AlissonNot analyzed1 file
References
814707Third-party advisory
http://secunia.com/advisories/14707 1013545vdb entry
http://securitytracker.com/id?1013545 14958vdb entry
http://www.osvdb.org/14958 14959vdb entry
http://www.osvdb.org/14959 12878vdb entry
http://www.securityfocus.com/bid/12878 vortexportal-act-file-include(19809)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/19809 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-0879