Unrated severityNVD Advisory· Published May 2, 2005· Updated Apr 16, 2026
CVE-2005-0565
CVE-2005-0565
Description
The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.
Affected products
10cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.10.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- secunia.com/advisories/14399nvdPatchVendor Advisory
- www.gentoo.org/security/en/glsa/glsa-200503-04.xmlnvdPatchVendor Advisory
- securitytracker.com/idnvdExploitVendor Advisory
- marc.infonvd
- exchange.xforce.ibmcloud.com/vulnerabilities/19482nvd
News mentions
0No linked articles in our index yet.