Unscored severity · published Jul 13, 2005
CVE-2005-2259
The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard…
–
CVSS
4.2%
EPSS
No
On KEV
Description
The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DN
Domain Name Auction · Usanet Creations
All versions, or not specified · source: NVD
MA
Makebid Auction Deluxe · Usanet Creations
3.30 · source: NVD
MA
Makebid Auction Standard · Usanet Creations
All versions, or not specified · source: NVD
MR
Makebid Reverse Auction · Usanet Creations
All versions, or not specified · source: NVD
SC
Standard Classified Ads · Usanet Creations
All versions, or not specified · source: NVD
US
Usanet Shopping Mall · Usanet Creations
All versions, or not specified · source: NVD