CVE-2005-2717 : PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remot

PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via send_reminders.php or other scripts.

Published 2005-08-29 20:14:00

Updated 2017-07-11 01:32:57

Source Debian GNU/Linux

View at NVD, CVE.org

Vulnerability category: File inclusion

Products affected by CVE-2005-2717

Webcalendar » Webcalendar » Version: 1.0.0 Update RC2
cpe:2.3:a:webcalendar:webcalendar:1.0.0:rc2:*:*:*:*:*:*
Matching versions
Webcalendar » Webcalendar » Version: 1.0.0 Update RC1
cpe:2.3:a:webcalendar:webcalendar:1.0.0:rc1:*:*:*:*:*:*
Matching versions
Webcalendar » Webcalendar » Version: 1.0.0
cpe:2.3:a:webcalendar:webcalendar:1.0.0:*:*:*:*:*:*:*
Matching versions
Webcalendar » Webcalendar » Version: 1.0.0 Update RC3
cpe:2.3:a:webcalendar:webcalendar:1.0.0:rc3:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2005-2717

EPSS FAQ

2.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-2717

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2005-2717

Jump to

Vulnerability Details : CVE-2005-2717

Products affected by CVE-2005-2717

Exploit prediction scoring system (EPSS) score for CVE-2005-2717

CVSS scores for CVE-2005-2717

References for CVE-2005-2717