CVE-2005-1117

All4WWW-Homepagecreator 1.0a - Remote File Inclusion via Site Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-1117. PoCs published by Francisco Alisson.

AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in All4WWW-Homepagecreator due to improper input sanitization in the 'include()' function. An attacker can exploit this to execute arbitrary server-side script code by manipulating the 'site' parameter.

Description

PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Francisco Alisson · textwebappsphp
https://www.exploit-db.com/exploits/25422

The provided text describes a remote file inclusion vulnerability in All4WWW-Homepagecreator due to improper input sanitization in the 'include()' function. An attacker can exploit this to execute arbitrary server-side script code by manipulating the 'site' parameter.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: All4WWW-Homepagecreator
No auth needed
Prerequisites: Access to the vulnerable web application · Ability to craft a malicious URL with a remote file inclusion payload
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/14972
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111350434925520&w=2
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13169

Scores

EPSS 0.0264
EPSS Percentile 83.7%

Details

Status published
Products (1)
all4www/all4www-homepagecreator 1.0a
Published May 02, 2005
Tracked Since Feb 18, 2026