Back

CVE-2005-0678

PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code.

Published: May 2, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
stadtaus form_mail_script *

GitHub Security Advisory GHSA-7mrp-m943-2ghx

PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 2.76%

Top 15% most likely to be exploited

Threat Score 30.8 / 100

Data Sources

NVD EPSS GitHub