CVE-2005-2793: Command Injection
Published Sep 2, 2005
·Updated
PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the customwelcomepage parameter.
Affected Software
2 affected components
Phpldapadmin Project Phpldapadmin=0.9.6
Phpldapadmin Project Phpldapadmin=0.9.7
Event History
Sep 2, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2793?
CVE-2005-2793 is considered a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2005-2793?
To fix CVE-2005-2793, you should upgrade phpLDAPadmin to version 0.9.8 or later.
3
What kind of attacks can be executed through CVE-2005-2793?
CVE-2005-2793 allows attackers to execute arbitrary PHP code on the server, which can lead to full system compromise.
4
Which versions of phpLDAPadmin are affected by CVE-2005-2793?
The affected versions of phpLDAPadmin are 0.9.6 and 0.9.7.
5
What is the nature of the vulnerability in CVE-2005-2793?
CVE-2005-2793 is a remote file inclusion vulnerability that exploits the custom_welcome_page parameter.