CVE-2005-2607

MEDIO 5.0CVE-2005-2607 · Published 17/08/2005 · updated 16/06/2026

In breve

CVE-2005-2607 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda simplicity of upload (phpsimplicity).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 75.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
simplicity of upload phpsimplicity	`= 1.3`	No fix yet

Description

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.

References

rgod.altervista.org/simply.html · Exploit
secunia.com/advisories/16273
securitytracker.com/id · Exploit
phpsimplicity.com/scripts.php · Patch
securityfocus.com/bid/14424 · Patch

Altre vulnerabilità di simplicity of upload

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free