CVE-2005-2559: High severity e107 e107 vulnerability

Published Aug 16, 2005

Updated

doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the epingcount parameter or (2) restricted shell metacharacters such as ">" and "&" in the epinghost parameter, which is not handled by the validation function.

Affected Software

1 affected component

e107 e107

Remediation

Patch Available

http://e107plugins.co.uk/news.php

Event History

Aug 16, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2559?

CVE-2005-2559 has a medium severity rating due to its potential for remote code execution.

How do I fix CVE-2005-2559?

To fix CVE-2005-2559, upgrade to version 1.03 or later of the ePing plugin for the e107 CMS.

What are the potential impacts of CVE-2005-2559?

The potential impacts of CVE-2005-2559 include arbitrary code execution and file overwrites on affected systems.

Which versions of ePing plugin are affected by CVE-2005-2559?

ePing plugin version 1.02 and earlier are affected by CVE-2005-2559.

Can CVE-2005-2559 be exploited remotely?

Yes, CVE-2005-2559 can be exploited remotely by attackers through specially crafted parameters.