Back

CVE-2005-2793

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter.

Published: Sep 2, 2005 Modified: Jun 16, 2026
CWE-77

CVSS Metrics

Affected Products (2)

Vendor Product Version
phpldapadmin_project phpldapadmin 0.9.6
phpldapadmin_project phpldapadmin 0.9.7

GitHub Security Advisory GHSA-48jv-v9q6-gcg3

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 2.74%

Top 15% most likely to be exploited

Threat Score 30.8 / 100

Data Sources

NVD EPSS GitHub