VULNERABILITY INTELLIGENCE
CVE-2005-0188
CVSS score7.5 HIGH
EPSS probability2.69%
CISA KEVNot currently listed
Published2004-10-06
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.