VULNERABILITY INTELLIGENCE

CVE-2005-3571

CVSS score5 MEDIUM
EPSS probability3.49%
CISA KEVNot currently listed
Published2005-11-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references