Description

doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restricted shell metacharacters such as ">" and "&" in the eping_host parameter, which is not handled by the validation function.

Remediation

References

CVE-2005-2559

Related Vulnerabilities

OpenSSL Observable Discrepancy Vulnerability (CVE-2003-0078)

Drupal Incorrect Authorization Vulnerability (CVE-2022-25274)

Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4612)

WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (4.3.20)

PHP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-7272)

Severity

High

Classification

CVE-2005-2559

Tags

Missing Update Known Vulnerabilities