What’s Vulnerable › Vulnerabilities

CVE-2005-1876

• Severity: medium (CVSS 4.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-06-09 · updated 2026-06-16
• Weakness: CWE-94

Description

Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template (.tpl) file.

Affected products

• CutePHP.com CuteNews: through 1.3.6

References

• http://marc.info/?l=bugtraq&m=111773528322711&w=2
• http://secunia.com/advisories/15594
• http://www.osvdb.org/17030
• http://marc.info/?l=bugtraq&m=111773528322711&w=2
• http://secunia.com/advisories/15594
• http://www.osvdb.org/17030

Get alerted when CVE-2005-1876 or the next vulnerability affects your stack