CVE-2005-0862

Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote...

7.5 HighPublic exploit

CVE-2005-0862 is a high vulnerability (CVSS 7.5) in Phpopenchat, published March 24, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.9%, the 95th percentile. No source names a fixed version.

Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php.

Exploit likelihood

10.9%Down 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2005-0862
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-0862
Updated: 2026-11-02

EUVDEUVD-2005-0863 No score

Record: EUVD-2005-0863
Updated: 2026-11-03

GitHub AdvisoriesGHSA-gj4f-h9q6-3q6j No score

Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote...

Record: GHSA-gj4f-h9q6-3q6j
Updated: 2026-11-02

Affected products

phpopenchat

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PHPOpenChat 2.3.4/3.0.1 - 'poc_loginform.php?phpbb_root_path' Remote File Inclusion	2005-03-15
Exploit-DB	PHPOpenChat 2.3.4/3.0.1 - 'poc.php' Remote File Inclusion	2005-03-15
Exploit-DB	PHPOpenChat 2.3.4/3.0.1 - 'ENGLISH_poc.php' Remote File Inclusion	2005-03-15

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References

Show 6 moreShow less