CVE-2005-3330
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2)...
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
Exploit likelihood
What each source reports
NVD Score used
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
- Record
CVE-2005-3330- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
- Record
CVE-2005-3330- Updated
- 2026-11-02
EUVDEUVD-2005-3329 No score
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
- Record
EUVD-2005-3329- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hf3f-2785-5v5g No score
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2)...
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
- Record
GHSA-hf3f-2785-5v5g- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Snoopy 0.9x/1.0/1.2 - Arbitrary Command Execution | 2005-10-26 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3330 is a high vulnerability (CVSS 7.5) in Snoopy, published October 27, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 17.2%, the 97th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/22874
secunia.com/advisories/17887
marc.info?l=bugtraq&m=113028858316430&w=2
svn.ampache.org/branches/3.3.1/docs/CHANGELOG
osvdb.org/20316
Show 13 moreShow less
securityreason.com/securityalert/117
securityfocus.com/bid/15213
sourceforge.net/project/shownotes.php?release_id=375385
securitytracker.com/id?1015104
vupen.com/english/advisories/2005/2727
nvd.nist.gov/vuln/detail/CVE-2005-3330
github.com/advisories/GHSA-hf3f-2785-5v5g