CVE-2005-3571

PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected.

CVSS Metrics

Affected Products (5)

GitHub Security Advisory GHSA-663v-cjm7-6hwq

PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique...

References (14)

• http://marc.info/?l=bugtraq&m=113199214723444&w=2
• http://secunia.com/advisories/17542 Vendor Advisory
• http://securityreason.com/securityalert/176
• http://securitytracker.com/id?1015206
• http://www.securityfocus.com/bid/15417
• http://www.securityfocus.com/bid/21664
• http://www.vupen.com/english/advisories/2005/2402 Vendor Advisory
• http://marc.info/?l=bugtraq&m=113199214723444&w=2
• http://secunia.com/advisories/17542 Vendor Advisory
• http://securityreason.com/securityalert/176
• http://securitytracker.com/id?1015206
• http://www.securityfocus.com/bid/15417
• http://www.securityfocus.com/bid/21664
• http://www.vupen.com/english/advisories/2005/2402 Vendor Advisory