Unscored severity · published Oct 27, 2005
CVE-2005-3330
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary…
–
CVSS
17.2%
EPSS
No
On KEV
Description
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
Exploitation
Is it being used?
Exploit prediction (EPSS)17.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Snoopy · Snoopy
1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3330
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3330
marc.info
http://marc.info/?l=bugtraq&m=113028858316430&w=2
marc.info
http://marc.info/?l=bugtraq&m=113062897231412&w=2
secunia.com
http://secunia.com/advisories/17330
Vendor Advisory
http://secunia.com/advisories/17455
Vendor Advisory
http://secunia.com/advisories/17779
Vendor Advisory
http://secunia.com/advisories/17887
More from Snoopy
9.8
CVE-2014-5009
Snoopy allows remote attackers to execute arbitrary commands
9.8
CVE-2014-5008
Snoopy allows remote attackers to execute arbitrary commands
9.8
CVE-2008-7313
The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands
–
CVE-2009-0502
Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before…