What’s Vulnerable › Vulnerabilities

CVE-2005-0887

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-03-24 · updated 2026-06-16

Description

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.

Affected products

• Michael Dean Double Choco Latte: 0.9.3, 0.9.4, 0.9.4.2, 0.9.4.3

References

• http://secunia.com/advisories/14688
• http://securitytracker.com/id?1013559
• http://sourceforge.net/project/shownotes.php?release_id=315144
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19806
• http://secunia.com/advisories/14688
• http://securitytracker.com/id?1013559
• http://sourceforge.net/project/shownotes.php?release_id=315144
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19806

Get alerted when CVE-2005-0887 or the next vulnerability affects your stack