Vulnerability Description
doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restricted shell metacharacters such as ">" and "&" in the eping_host parameter, which is not handled by the validation function.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| E107 | E107 | All versions |
References
- http://e107plugins.co.uk/news.phpPatchURL Repurposed
- http://marc.info/?l=bugtraq&m=112328161319148&w=2
- http://e107plugins.co.uk/news.phpPatchURL Repurposed
- http://marc.info/?l=bugtraq&m=112328161319148&w=2
FAQ
What is CVE-2005-2559?
CVE-2005-2559 is a vulnerability with a CVSS score of 7.5 (HIGH). doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restri...
How severe is CVE-2005-2559?
CVE-2005-2559 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-2559?
Check the references section above for vendor advisories and patch information. Affected products include: E107 E107.