CVE-2005-0743
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote...
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.
Exploit likelihood
What each source reports
NVD Score used
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.
- Record
CVE-2005-0743- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.
- Record
CVE-2005-0743- Updated
- 2026-11-02
EUVDEUVD-2005-0744 No score
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.
- Record
EUVD-2005-0744- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xm49-865r-7465 No score
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote...
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.
- Record
GHSA-xm49-865r-7465- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0743 is a high vulnerability (CVSS 7.5) in Xoops, published March 13, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.