208Third-party advisory
http://securityreason.com/securityalert/208 CVE-2005-3860
Athena PHP Website Administration 0.1 - Remote File Inclusion
Record summary
CVE-2005-3860 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athena_dir parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAthena PHP Website Administration 0.1 - Remote File InclusionExploitDB exploitby [GB]Not analyzed1 file
References
71015278vdb entry
http://securitytracker.com/id?1015278 sourceforge.netConfirmation
http://sourceforge.net/forum/forum.php?forum_id=514746 20051126 Remote file include in Athenamailing list
http://www.securityfocus.com/archive/1/417796/100/0/threaded 15574vdb entry
http://www.securityfocus.com/bid/15574 ADV-2005-2599vdb entry
http://www.vupen.com/english/advisories/2005/2599 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-3860