CVE-2005-3585

Description

References

• glide.stanford.edu/yichen/research/sec.pdf
• marc.info
• secunia.com/advisories/17410 · Vendor Advisory
• osvdb.org/20441
• securityfocus.com/archive/1/419280/100/0/threaded
• securityfocus.com/bid/15277
• exchange.xforce.ibmcloud.com/vulnerabilities/22972

More vulnerabilities in phpwebthings

• CVE-2009-2147HIGH 7.5SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2009-2081MEDIUM 4.3Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers …
• CVE-2007-3141MEDIUM 6.8PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a…
• CVE-2006-6042MEDIUM 6.8PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is enabled, allows remot…
• CVE-2005-4226HIGH 7.5Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL command…