CVE-2005-2616

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-08-17 · updated 2026-06-16

Description

Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php.

Affected products

Ezupload: 2.2

References

http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt
http://secunia.com/advisories/16434
http://securitytracker.com/id?1014723
http://www.securiteam.com/exploits/5JP0J15GKU.html
http://www.securityfocus.com/bid/14534
http://www.vupen.com/english/advisories/2005/1379
http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt
http://secunia.com/advisories/16434
http://securitytracker.com/id?1014723
http://www.securiteam.com/exploits/5JP0J15GKU.html
http://www.securityfocus.com/bid/14534
http://www.vupen.com/english/advisories/2005/1379

Get alerted when CVE-2005-2616 or the next vulnerability affects your stack