Unscored severity · published Mar 7, 2005
CVE-2005-0689
includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter
–
CVSS
9.9%
EPSS
No
On KEV
Description
includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
The Includer · Jimmy
1.0; 1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0689
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0689
marc.info
http://marc.info/?l=bugtraq&m=111021730710779&w=2
marc.info
http://marc.info/?l=bugtraq&m=111030957413411&w=2
Exploit
http://www.securityfocus.com/bid/12738
More from The Includer
–
CVE-2005-0931
PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code