Back

CVE-2005-2258

PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter.

Published: Jul 13, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
squitosoft squito_gallery 1.33

GitHub Security Advisory GHSA-55xh-mvgj-c3j6

PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 3.25%

Top 13% most likely to be exploited

Threat Score 31 / 100

Data Sources

NVD EPSS GitHub