CVE-2005-2865: High severity aMember aMember vulnerability
Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP code via the config[rootdir] parameter to (1) mysql.inc.php, (2) efsnet.inc.php, (3) theinternetcommerce.inc.php, (4) cdg.inc.php, (5) compuworld.inc.php, (6) directone.inc.php, (7) authorizeaim.inc.php, (8) beanstream.inc.php, (9) config.inc.php, (10) eprocessingnetwork.inc.php, (11) eway.inc.php, (12) linkpoint.inc.php, (13) logiccommerce.inc.php, (14) netbilling.inc.php, (15) payflowpro.inc.php, (16) paymentsgateway.inc.php, (17) payos.inc.php, (18) payready.inc.php, or (19) plugnplay.inc.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2865?
CVE-2005-2865 has a medium severity rating due to its potential for remote code execution.
How do I fix CVE-2005-2865?
To fix CVE-2005-2865, update aMember Pro to the latest version that addresses this vulnerability.
What are the risks associated with CVE-2005-2865?
The risks of CVE-2005-2865 include unauthorized access and execution of malicious code on the affected server.
Who is affected by CVE-2005-2865?
CVE-2005-2865 affects users of aMember Pro version 2.3.4.
What types of attacks can be performed using CVE-2005-2865?
Attackers can exploit CVE-2005-2865 to perform remote file inclusion attacks, allowing them to execute arbitrary PHP code.