Lucene search
+L

CVE-2005-2199

🗓️ 11 Jul 2005 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 180 Views🌐 WEB

CVE-2005-2199 PHP remote file inclusion vulnerability in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable

Related
Detection
Refs
Paths
NVD
Node
ParameterPositionPathDescriptionCWE
iChannelquery param/DUportalPro34/Articles/default.asp?iChannel=2[SQL Inject]&nChannel=ArticlesSQL injection in iChannel parameter of Articles default page (DUportalPro34)
iDataquery param/DUportalPro34/Articles/detail.asp?iData=4[SQL Inject]&iCat=292&iChannel=2&nChannel=ArticlesSQL injection in iData parameter of Articles detail page (DUportalPro34)
iMemquery param/DUportalPro34/home/members.asp?iMem=[SQL Inject]SQL injection in iMem parameter of members page (DUportalPro34)
iCatquery param/DUportalPro34/topics/cat.asp?iCat=4[SQL Inject]&iChannel=16&nChannel=TopicsSQL injection in iCat parameter of topics category (DUportalPro34)
iChannelquery param/DUportalPro34/Polls/default.asp?iChannel=15[SQL Inject]&nChannel=PollsSQL injection in iChannel parameter of polls default page (DUportalPro34)
offsetquery param/DUportalPro34/admin/members_listing_approval.asp?offset=[SQL Inject]SQL injection in offset parameter of admin/members_listing_approval (DUportalPro34)
iChannelquery param/DUportalPro34/admin/channels_edit.asp?iChannel=7[SQL inject]&nChannel=[Name Module]SQL injection in iChannel and potentially nChannel parameters of channels_edit (DUportalPro34)
nChannelquery param/DUportalPro34/admin/channels_edit.asp?iChannel=7[SQL inject]&nChannel=[Name Module]SQL injection in iChannel and potentially nChannel parameters of channels_edit (DUportalPro34)
config[ppa_root_path]nested/inc/functions.inc.php?config[ppa_root_path]=http://www.example.comRemote file include via config[ppa_root_path] parameter (PHP RFI)

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:14Current
6.7Medium risk
Vulners AI Score6.7
CVSS 27.5
EPSS0.10074
180