17771Third-party advisory
http://secunia.com/advisories/17771 CVE-2005-3859
Q-News 2.0 - Remote File Inclusion
Record summary
CVE-2005-3859 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBQ-News 2.0 - Remote File InclusionExploitDB exploitby [GB]Not analyzed1 file
References
7209Third-party advisory
http://securityreason.com/securityalert/209 1015277vdb entry
http://securitytracker.com/id?1015277 20051126 Remote file include in Q-Newsmailing list
http://www.securityfocus.com/archive/1/417797/100/0/threaded 15576vdb entry
http://www.securityfocus.com/bid/15576 ADV-2005-2600vdb entry
http://www.vupen.com/english/advisories/2005/2600 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-3859