CVE-2005-0632

PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

2.62% chance of exploitation in the next 30 days, 85th percentile

Published

2005-03-04

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=110989169008570&w=2

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25180

Security advisories

• http://secunia.com/advisories/14449
• http://securitytracker.com/id?1013345
• http://www.securityfocus.com/bid/12696

References

• CVE Record
• NVD entry