Vulnerability Database

313,552

Total vulnerabilities in the database

CVE-2005-0647

admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.

  • Published: May 2, 2005
  • Updated: Nov 9, 2025
  • CVE: CVE-2005-0647
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
php_arena / panews 2.0.4b 2.0.4b.x