Unscored severity · published May 2, 2005
CVE-2005-0828
highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP…
–
CVSS
9.2%
EPSS
No
On KEV
Description
highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from mainfile.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.2% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Ciamos · Ciamos
0.9.2_rc1 · source: NVD
EX
E-xoops · E-xoops
1.05r3 · source: NVD
RU
Runcms · Runcms
1.1a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0828
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0828
marc.info
http://marc.info/?l=bugtraq&m=111117241923006&w=2
marc.info
http://marc.info/?l=bugtraq&m=111125645312693&w=2
Patch
http://secunia.com/advisories/14641
Vendor Advisory
http://secunia.com/advisories/14648
securitytracker.com
http://securitytracker.com/id?1013485
Exploit
http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt
More from Ciamos
–
CVE-2005-0827
Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive…