CVE-2005-2616 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 11.5% (pctl 96)
Patch early
A public exploit exists.
Description
Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 11.45% — more likely to be exploited than 96% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-08-17 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| ezupload | ezupload |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | ezUpload 2.2 - 'index.php?path' Remote File Inclusion | 2005-08-10 |
| exploit-db | ezUpload 2.2 - 'initialize.php?path' Remote File Inclusion | 2005-08-10 |
| exploit-db | ezUpload 2.2 - 'customize.php?path' Remote File Inclusion | 2005-08-10 |
| exploit-db | ezUpload 2.2 - 'form.php?path' Remote File Inclusion | 2005-08-10 |
References
- http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt
- http://secunia.com/advisories/16434
- http://securitytracker.com/id?1014723
- http://www.securiteam.com/exploits/5JP0J15GKU.html
- http://www.securityfocus.com/bid/14534
- http://www.vupen.com/english/advisories/2005/1379
- http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt
- http://secunia.com/advisories/16434
- http://securitytracker.com/id?1014723
- http://www.securiteam.com/exploits/5JP0J15GKU.html
- http://www.securityfocus.com/bid/14534
- http://www.vupen.com/english/advisories/2005/1379
→ the Explorer · watch your stack · NVD