CVE-2005-3519

12 documents4 sources
7.5
CVSS
HIGH
EPSS4.3%(89th)
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDmysource/mysource2.14.0, 2.14.0rc2+1
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
NVD ↗MITRE ↗Patch: secunia.com ↗Patch: securitytracker.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-h9jc-v73g-356r: Multiple PHP file inclusion vulnerabilities in MySource 2↗2022-05-01
▶
CVEList
CVE-2005-3519: Multiple PHP file inclusion vulnerabilities in MySource 2↗2005-11-06
▶

💥Exploits & PoCs

9
Exploit-DB
MySource 2.14 - 'init_mysource.php?INCLUDE_PATH' Remote File Inclusion↗2005-10-18
▶
Exploit-DB
MySource 2.14 - 'Date.php?PEAR_PATH' Remote File Inclusion↗2005-10-18
▶
Exploit-DB
MySource 2.14 - 'mimeDecode.php?PEAR_PATH' Remote File Inclusion↗2005-10-18
▶
Exploit-DB
MySource 2.14 - 'new_upgrade_functions.php' Multiple Remote File Inclusions↗2005-10-18
▶
Exploit-DB
MySource 2.14 - 'mail.php?PEAR_PATH' Remote File Inclusion↗2005-10-18
▶
CVE-2005-3519 (HIGH CVSS 7.5) | Multiple PHP file inclusion vulnera | cvebase.io