Vulnerability Details : CVE-2005-0887
Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.
Exploit prediction scoring system (EPSS) score for CVE-2005-0887
Probability of exploitation activity in the next 30 days: 4.19%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 92 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2005-0887
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2005-0887
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/19806
-
http://sourceforge.net/project/shownotes.php?release_id=315144
Patch;Vendor Advisory
-
http://securitytracker.com/id?1013559
Patch;Vendor Advisory
Products affected by CVE-2005-0887
- cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:michael_dean:double_choco_latte:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:michael_dean:double_choco_latte:0.9.4:*:*:*:*:*:*:*