CVE-2005-4462

Tolva PHP <0.1.0 - RCE

Title source: llm

Description

PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code via a URL in the ROOT parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by xbefordx · textwebappsphp

https://www.exploit-db.com/exploits/26921

View Code ZIP pw:eip

References (3)

Core 3

Core References

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/16000

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/419992/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/288

Scores

EPSS 0.0581

EPSS Percentile 90.6%

Details

Status published

Products (1)

tolva/tolva 0.1.0

Published Dec 21, 2005

Tracked Since Feb 18, 2026