← Database

CVE-2005-2607

MEDIUM CVSS: 5.0 Published: 2005-08-17 Modified: 2026-06-16

Description

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.

Affected Platforms

Phpsimplicity Simplicity Of Upload

Weakness Type

NVD-CWE-Other

References