Back
CVE-2005-0678
PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code.
Published: May 2, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| stadtaus | form_mail_script | * |
GitHub Security Advisory GHSA-7mrp-m943-2ghx
PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier...
References (8)
- http://marc.info/?l=bugtraq&m=110996489800035&w=2
- http://secunia.com/advisories/14505 Patch
- http://securitytracker.com/id?1013378 Exploit
- http://www.stadtaus.com/forum/t-1579.html Patch
- http://marc.info/?l=bugtraq&m=110996489800035&w=2
- http://secunia.com/advisories/14505 Patch
- http://securitytracker.com/id?1013378 Exploit
- http://www.stadtaus.com/forum/t-1579.html Patch
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
2.76%
Top 15% most likely to be exploited
Threat Score
30.8 / 100
Data Sources
NVD
EPSS
GitHub