VULNERABILITY INTELLIGENCE
CVE-2005-2893
CVSS score7.5 HIGH
EPSS probability2.69%
CISA KEVNot currently listed
Published2005-09-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login.
Primary references
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108