CVE-2005-1222

cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php…

published April 22, 2005

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php, then including the code in the m_for_racine parameter, which is then written to cat_for_gen.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06580 · 93.8th percentile
Published
2005-04-22T04:00Z
EPSS history
Timeline
  • 22 APR 04:00Z
    cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php…
    cvelistv5