CVE-2005-0294

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-01-16 · updated 2026-06-16

Description

minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter.

Affected products

Minis: 0.2.1

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html
http://marc.info/?l=bugtraq&m=110599953704025&w=2
http://secunia.com/advisories/13866
http://securitytracker.com/id?1012911
https://exchange.xforce.ibmcloud.com/vulnerabilities/18929
http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html
http://marc.info/?l=bugtraq&m=110599953704025&w=2
http://secunia.com/advisories/13866
http://securitytracker.com/id?1012911
https://exchange.xforce.ibmcloud.com/vulnerabilities/18929

Get alerted when CVE-2005-0294 or the next vulnerability affects your stack