← Database

CVE-2005-0565

HIGH CVSS: 7.5 Published: 2005-05-02 Modified: 2026-06-16

Description

The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.

Affected Platforms

Phpwebsite Phpwebsite

Weakness Type

NVD-CWE-Other

References