CVE-2005-0748

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14550Patch, Vendor Advisory
http://securitytracker.com/id?1013409Vendor Advisory
http://www.securityfocus.com/bid/12773Vendor Advisory
http://www.vupen.com/english/advisories/2005/0248Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19651
http://secunia.com/advisories/14550Patch, Vendor Advisory
http://securitytracker.com/id?1013409Vendor Advisory
http://www.securityfocus.com/bid/12773Vendor Advisory
http://www.vupen.com/english/advisories/2005/0248Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19651

Timeline

Published: Mar 10, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-07497.2The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF li CVE-2005-07507.2The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users CVE-2005-07527.5The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGI CVE-2005-07537.5Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.CVE-2005-07547.5Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbi CVE-2005-07555.1Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to CVE-2005-07562.1ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of servi CVE-2005-07572.1The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which a CVE-2005-07584.6zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that a CVE-2005-07595.0ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.CVE-2005-07605.0The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.CVE-2005-07615.0Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD