Description

doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restricted shell metacharacters such as ">" and "&" in the eping_host parameter, which is not handled by the validation function.

Remediation

References

CVE-2005-2559

Related Vulnerabilities

WordPress Plugin WP Custom Admin Login Page Logo Unspecified Vulnerability (1.4.1)

PostgreSQL Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-21469)

WordPress Plugin Import all XML, CSV & TXT into WordPress Cross-Site Scripting (3.8.7)

WordPress Plugin Coming Soon & Maintenance Mode Page Cross-Site Request Forgery (1.57)

FluxBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-10029)

Severity

High

Classification

CVE-2005-2559

Tags

Missing Update Known Vulnerabilities