CVE-2005-2893

Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP…

published September 14, 2005

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02690 · 85.7th percentile
Published
2005-09-14T04:00Z
EPSS history
Timeline
  • 14 SEP 04:00Z
    Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP…
    cvelistv5