CVE-2005-3519
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Title source: llmExploitation Summary
EIP tracks 9 public exploits for CVE-2005-3519. PoCs published by Secunia Research.
AI-analyzed exploit summary The provided text describes a remote/local file include vulnerability in MySource due to improper input sanitization. It includes a sample exploit URL but lacks executable code.
Description
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
Exploits (9)
The provided text describes a remote/local file include vulnerability in MySource due to improper input sanitization. It includes a sample exploit URL but lacks executable code.
The provided text describes a remote/local file inclusion vulnerability in MySource due to improper input sanitization. It includes a sample exploit URL but lacks executable code.
The provided text describes a remote/local file inclusion vulnerability in MySource, but does not include actual exploit code. It references a URL parameter manipulation to include arbitrary files, potentially leading to remote code execution.
The code describes a remote file inclusion vulnerability in MySource due to improper input sanitization. It provides example URLs demonstrating how an attacker could execute arbitrary server-side script code by manipulating the INCLUDE_PATH or SQUIZLIB_PATH parameters.
The provided text describes a remote and local file include vulnerability in MySource due to improper input sanitization. It includes a sample exploit URL but lacks executable code.
This exploit demonstrates a remote file inclusion vulnerability in MySource due to improper input sanitization. An attacker can execute arbitrary server-side script code by manipulating the PEAR_PATH parameter.
The provided text describes a remote and local file include vulnerability in MySource due to improper input sanitization. It allows arbitrary server-side script execution via manipulated PEAR_PATH parameters.
The provided text describes a remote/local file include vulnerability in MySource, where unsanitized user input allows arbitrary script execution. No actual exploit code is present, only a description and example URL.
The provided text describes a remote and local file include vulnerability in MySource due to improper input sanitization. It includes an example URL demonstrating how an attacker could exploit this to execute arbitrary server-side script code.