cvs.sourceforge.netConfirmation
http://cvs.sourceforge.net/viewcvs.py/phpmyvisites/phpmyvisites/include/set_lang.php?r1=1.5&r2=1.6 CVE-2005-1325
PHPMyVisites 1.3 - 'Set_Lang' File Inclusion
Record summary
CVE-2005-1325 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPHPMyVisites 1.3 - 'Set_Lang' File InclusionExploitDB exploitby Max CernyNot analyzed1 file
References
420050426 [exploits] phpMyVisites 1.3 local file retrievalmailing list
http://marc.info/?l=bugtraq&m=111454298603060&w=2 13370vdb entry
http://www.securityfocus.com/bid/13370 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-1325