CVE-2005-4694

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17158Patch, Vendor Advisory
http://www.osvdb.org/19933Patch
http://www.plainblack.com/getwebgui/advisories/security-exploit-patch-for-6.3-and-aboveExploit
http://www.securityfocus.com/bid/15083Exploit, Patch
http://www.vupen.com/english/advisories/2005/2060
https://exchange.xforce.ibmcloud.com/vulnerabilities/22730
http://secunia.com/advisories/17158Patch, Vendor Advisory
http://www.osvdb.org/19933Patch
http://www.plainblack.com/getwebgui/advisories/security-exploit-patch-for-6.3-and-aboveExploit
http://www.securityfocus.com/bid/15083Exploit, Patch
http://www.vupen.com/english/advisories/2005/2060
https://exchange.xforce.ibmcloud.com/vulnerabilities/22730

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-46955.0Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component termination) via mal CVE-2005-46962.1The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plainte CVE-2005-46972.1The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys (PMK) of the WPA pre CVE-2005-46984.3Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 91 CVE-2005-46996.4Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program an CVE-2005-47005.0TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to obtain sensitive inform CVE-2005-47012.1Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive information such as proce CVE-2005-47026.4SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL comma CVE-2005-47035.0Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains CVE-2005-47045.0Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is int CVE-2005-47055.0BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SS CVE-2005-47062.1Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service (panic) vi