CVE-2005-0860
HIGH 7.5EPSS 2.5%
PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to (1) article.php, (2) authorall.php, (3) comment.php, (4) display.php, or (5) displayall.php.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 2.51% chance of exploitation in the next 30 days, 85th percentile
- Published
- 2005-03-24
- Updated
- 2024-08-07