CVE-2005-2775

CVE-2005-2775 affects phpWebNotes 2.0.0 where the t_path_core parameter is used in core/api.php with PHP’s extract(), enabling a PHP file inclusion vulnerability. This allows a remote attacker to execute arbitrary PHP code on the server and potentially view arbitrary files. The issue is documente...

XSS security hole in phpwebnotes.

Hi security team! I have found a security hole in a popular php application not maintained anymore. The hole already gets exploited - our server was hacked that way two days ago. Probably hackers just use google to find installations of phpwebnotes. Version: phpWebNotes-2.0.0-pr1.tar.gz last...