Vulnerability in Jason Hines Phpweblog
CVE-2005-0698
PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH parameter to index.php to reference a URL on a remote web server that contains the code.
EPSS: 0.081 (94.2th percentile) — read the EPSS interpretation.
Affected products
- Jason_hines Phpweblog — versions 0.4.2, 0.5, 0.5.1
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)