Back

CVE-2005-3859

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter.

Published: Nov 29, 2005 Modified: Jun 16, 2026
CWE-94

CVSS Metrics

Affected Products (1)

Vendor Product Version
q-news q-news 2.0

GitHub Security Advisory GHSA-46f8-5fq9-8hmq

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 3.44%

Top 12% most likely to be exploited

Threat Score 31 / 100

Data Sources

NVD EPSS GitHub