Multiple eval injection vulnerabilities in the help... · CVE-2005-3554 · GitHub Advisory Database · GitHub

Multiple eval injection vulnerabilities in the help...

Moderate severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables.

References

Published by the National Vulnerability Database

Nov 16, 2005

Published to the GitHub Advisory Database May 1, 2022

Last updated Jan 30, 2023