CVE-2005-2775

phpWebNotes 2.0.0 - Remote Code Execution via t_path_core Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-2775. PoCs published by [email protected].

AI-analyzed exploit summary The code describes a remote file include vulnerability in phpWebNotes due to improper input sanitization, allowing arbitrary PHP code execution via a crafted URL. No actual exploit code is provided, only a description and example URL.

Description

php_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as $t_path_core, which leads to a PHP file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via the t_path_core parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/26201

The code describes a remote file include vulnerability in phpWebNotes due to improper input sanitization, allowing arbitrary PHP code execution via a crafted URL. No actual exploit code is provided, only a description and example URL.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: phpWebNotes (version not specified)
No auth needed
Prerequisites: Target application must be running phpWebNotes with vulnerable configuration · Remote file inclusion must be enabled on the server
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14679
Exploit vdb-entry x_refsource_sectrack
http://www.securitytracker.com/alerts/2005/Aug/1014807.html
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112516693300371&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/22040

Scores

EPSS 0.0261
EPSS Percentile 83.8%

Details

Status published
Products (1)
phpwebnotes/phpwebnotes 2.0.0
Published Sep 02, 2005
Tracked Since Feb 18, 2026