CVE-2005-3010

Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to…

published September 21, 2005

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to execute arbitrary PHP code via the HTTP_CLIENT_IP header (Client-Ip), which is injected into data/flood.db.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06338 · 93.6th percentile
Published
2005-09-21T04:00Z
EPSS history
Timeline
  • 21 SEP 04:00Z
    Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to…
    cvelistv5