CVE-2005-4173

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing...

5.0 Medium

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.

Exploit likelihood

1.76%Up 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.

Record: CVE-2005-4173
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.

Record: CVE-2005-4173
Updated: 2026-11-02

EUVDEUVD-2005-4168 No score

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.

Record: EUVD-2005-4168
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8w4r-4r44-xw5g No score

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing...

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.

Record: GHSA-8w4r-4r44-xw5g
Updated: 2026-11-02

Affected products

efiction project efiction

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4173 is a medium vulnerability (CVSS 5.0) in Efiction Project Efiction, published December 11, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

History

In short

References