← Database

CVE-2005-2328

MEDIUM CVSS: 5.0 Published: 2005-07-20 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbitrary PHP code via the CFG_PATH variable.

Affected Platforms

Laffer Laffer

Weakness Type

NVD-CWE-Other

References