medium4.6Public exploit code
CVE-2005-0698
PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpWebLog 0.5.3 - Arbitrary File Inclusion2005-03-07 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH parameter to index.php to reference a URL on a remote web server that contains the code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jason Hines | Phpweblog | Versions 0.4.2, 0.5, 0.5.1, 0.5.2, 0.5.3 |