CVE-2005-2607 PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a t...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpsimplicity simplicity of upload | = 1.3 | No fix listed |
References
- rgod.altervista.org exploit
- 16273 third-party-advisory
- 1014591 exploit vdb-entry
- www.phpsimplicity.com patch
- 14424 patch vdb-entry