CVE-2004-2538

Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer.

Published Bycve@mitre.org

Published DateDec 31, 2004, 05:00

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

6.5

Vector String

AV:N/AC:L/Au:S/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL

References

http://phpcodegenie.sourceforge.net/phpCodeGenie/docs/ChangeLog.txt
http://secunia.com/advisories/12853
http://securitytracker.com/id?1011911
http://www.osvdb.org/11102
http://www.securityfocus.com/bid/11524
https://exchange.xforce.ibmcloud.com/vulnerabilities/17848

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

6.5

Vector String

AV:N/AC:L/Au:S/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL