Back

CVE-2005-4824

PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCAL_PATH parameter, a different vulnerability than CVE-2005-1965.

Published: Dec 31, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor	Product	Version
glen_campbell	siteframe	*

GitHub Security Advisory GHSA-2wwq-c24x-xw9j

PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows...

References (2)

http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html Vendor Advisory
http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html Vendor Advisory

Risk Scores

CVSS Score 7.5 / 10

EPSS Score 1.23%

Top 34% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub