CVE-2005-2685

SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter. NOTE: it is possible that this vulnerability stems from PhpMyExplorer, which is a separate package.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-wqhq-hjpg-77xq

SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to...

References (4)

• http://rgod.altervista.org/save_yourself_from_savewebportal34.html Exploit, Vendor Advisory
• http://secunia.com/advisories/16522 Exploit, Vendor Advisory
• http://rgod.altervista.org/save_yourself_from_savewebportal34.html Exploit, Vendor Advisory
• http://secunia.com/advisories/16522 Exploit, Vendor Advisory