Vulnerability in Phpsimplicity Simplicity Of Upload

CVE-2005-2607

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.

EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.

Affected products

Phpsimplicity Simplicity_of_upload — versions 1.3
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)