Back
CVE-2005-2893
Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login.
Published: Sep 14, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| pblang | pblang | 4.65 |
GitHub Security Advisory GHSA-3ff3-mxr5-9gvx
Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier...
References (8)
- http://marc.info/?l=bugtraq&m=112611338417979&w=2
- http://secunia.com/advisories/16711/ Vendor Advisory
- http://securitytracker.com/alerts/2005/Sep/1014861.html Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22187
- http://marc.info/?l=bugtraq&m=112611338417979&w=2
- http://secunia.com/advisories/16711/ Vendor Advisory
- http://securitytracker.com/alerts/2005/Sep/1014861.html Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22187
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
2.69%
Top 15% most likely to be exploited
Threat Score
30.8 / 100
Data Sources
NVD
EPSS
GitHub