VulnerabilityModified
CVE-2005-2437
Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code.
MEDIUM 5.0EPSS 1.35%
Does this matter?
Lower severity and a low EPSS score (1.35%). Track it; it rarely justifies an emergency change on its own.
Description
Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.35% probability · 70th percentile
- CISA KEV
- Not listed
- Affected
- website baker/website baker
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=112260471228762&w=2
- http://secunia.com/advisories/16263
- http://www.osvdb.org/18345
- http://www.securityfocus.com/bid/14406
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21634
- http://marc.info/?l=bugtraq&m=112260471228762&w=2
- http://secunia.com/advisories/16263
- http://www.osvdb.org/18345
- http://www.securityfocus.com/bid/14406
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21634
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.