Vulnerability Details : CVE-2005-0887
Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.
Products affected by CVE-2005-0887
- cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:michael_dean:double_choco_latte:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:michael_dean:double_choco_latte:0.9.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2005-0887
3.90%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 92 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2005-0887
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2005-0887
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/19806
-
http://sourceforge.net/project/shownotes.php?release_id=315144
Patch;Vendor Advisory
-
http://securitytracker.com/id?1013559
Patch;Vendor Advisory
Jump to