CVEvulnerability
CVE-2005-2616
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php.
Affected configurations
• ezupload ezupload 2.2
References
- http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt Exploit
- http://secunia.com/advisories/16434 Vendor Advisory
- http://securitytracker.com/id?1014723 securitytracker.com
- http://www.securiteam.com/exploits/5JP0J15GKU.html Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/14534 Exploit
- http://www.vupen.com/english/advisories/2005/1379 www.vupen.com
- http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt Exploit
- http://secunia.com/advisories/16434 Vendor Advisory
- http://securitytracker.com/id?1014723 securitytracker.com
- http://www.securiteam.com/exploits/5JP0J15GKU.html Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/14534 Exploit
- http://www.vupen.com/english/advisories/2005/1379 www.vupen.com