Unscored severity · published Aug 17, 2005
CVE-2005-2607
PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the…
–
CVSS
1.6%
EPSS
No
On KEV
Description
PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SO
Simplicity OF Upload · Phpsimplicity
1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2607
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2607
Exploit
http://rgod.altervista.org/simply.html
secunia.com
http://secunia.com/advisories/16273
Exploit
http://securitytracker.com/id?1014591
Patch
http://www.phpsimplicity.com/scripts.php?id=3
Patch
http://www.securityfocus.com/bid/14424
More from Simplicity OF Upload
–
CVE-2009-4818
Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers to execute arbitrary PHP code by uploading a file with a…