VULNERABILITY INTELLIGENCE

CVE-2005-2691

CVSS score7.5 HIGH
EPSS probability2.32%
CISA KEVNot currently listed
Published2005-08-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code.

Primary references