Vulnerability Description
PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the (1) page and (2) site parameters.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oste | Oste | 1.0 |
References
- http://osvdb.org/20578
- http://secunia.com/advisories/17493Vendor Advisory
- http://securitytracker.com/id?1015163
- http://www.securityfocus.com/archive/1/415963/30/0/threaded
- http://www.securityfocus.com/bid/15340Exploit
- http://www.vupen.com/english/advisories/2005/2347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23023
- http://osvdb.org/20578
- http://secunia.com/advisories/17493Vendor Advisory
- http://securitytracker.com/id?1015163
- http://www.securityfocus.com/archive/1/415963/30/0/threaded
- http://www.securityfocus.com/bid/15340Exploit
- http://www.vupen.com/english/advisories/2005/2347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23023
FAQ
What is CVE-2005-3558?
CVE-2005-3558 is a vulnerability with a CVSS score of 7.5 (HIGH). PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the (1) page and (2) site parameters.
How severe is CVE-2005-3558?
CVE-2005-3558 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-3558?
Check the references section above for vendor advisories and patch information. Affected products include: Oste Oste.