VulnerabilityModified
CVE-2005-2544
PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter.
MEDIUM 5.0EPSS 1.45%
Does this matter?
Lower severity and a low EPSS score (1.45%). Track it; it rarely justifies an emergency change on its own.
Description
PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.45% probability · 72th percentile
- CISA KEV
- Not listed
- Affected
- comdev/comdev ecommerce
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=112327556202520&w=2
- http://secunia.com/advisories/16346Vendor Advisory
- http://www.osvdb.org/18601
- http://www.securityfocus.com/bid/14478
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21733
- http://marc.info/?l=bugtraq&m=112327556202520&w=2
- http://secunia.com/advisories/16346Vendor Advisory
- http://www.osvdb.org/18601
- http://www.securityfocus.com/bid/14478
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21733
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.