CVE-2005-2691: High severity runcms vulnerability
Published Aug 24, 2005
·Updated
includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTROVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code.
Affected Software
3 affected components
Runcms RunCMS=1.1a
Runcms RunCMS=1.2
Runcms RunCMS=1.1
Event History
Aug 24, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2691?
CVE-2005-2691 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2005-2691?
To fix CVE-2005-2691, update your RunCMS to version 1.3 or later where the vulnerability is patched.
3
What versions of RunCMS are affected by CVE-2005-2691?
CVE-2005-2691 affects RunCMS versions 1.1, 1.1a, and 1.2.
4
What is the impact of CVE-2005-2691?
The impact of CVE-2005-2691 is that it allows attackers to overwrite arbitrary variables, potentially leading to arbitrary code execution.
5
Who can exploit CVE-2005-2691?
CVE-2005-2691 can be exploited by remote attackers who can send crafted HTTP POST requests to the affected server.