VDB
CVE-2005-3390
CVE-2005-3390
PUBLISHED
Reported by mitre · Published November 1, 2005
The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, * |
Timeline
- Nov 1, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 21, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
- Feb 13, 2024 EPSS Score
References
- 21252 third-party-advisoryx_refsource_SECUNIA
- 22691 third-party-advisoryx_refsource_SECUNIA
- MDKSA-2005:213 vendor-advisoryx_refsource_MANDRIVA
- RHSA-2005:831 vendor-advisoryx_refsource_REDHAT
- x_refsource_CONFIRM
- 18198 third-party-advisoryx_refsource_SECUNIA
- SSRT061238 vendor-advisoryx_refsource_HP
- 132 third-party-advisoryx_refsource_SREASON
- 18054 third-party-advisoryx_refsource_SECUNIA
- ADV-2005-2254 vdb-entryx_refsource_VUPEN
- 20051031 Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability mailing-listx_refsource_BUGTRAQ
- 17559 third-party-advisoryx_refsource_SECUNIA
- FLSA:166943 vendor-advisoryx_refsource_FEDORA
- oval:org.mitre.oval:def:10537 vdb-entrysignaturex_refsource_OVAL
- 15250 vdb-entryx_refsource_BID
- 17371 third-party-advisoryx_refsource_SECUNIA
- ADV-2006-4320 vdb-entryx_refsource_VUPEN
- RHSA-2006:0549 vendor-advisoryx_refsource_REDHAT
- 17490 third-party-advisoryx_refsource_SECUNIA
- SUSE-SA:2005:069 vendor-advisoryx_refsource_SUSE
…and 13 more