CVE-2005-4174
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct...
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used.
Exploit likelihood
What each source reports
NVD Score used
7.5
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used.
- Record
CVE-2005-4174- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used.
- Record
CVE-2005-4174- Updated
- 2026-11-02
EUVDEUVD-2005-4169 No score
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used.
- Record
EUVD-2005-4169- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-92v9-v65f-f4q8 No score
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct...
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used.
- Record
GHSA-92v9-v65f-f4q8- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-4174 is a high vulnerability (CVSS 7.5), published December 11, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.96%, the 80th percentile. No source names a fixed version.
References
efiction.wallflowergirl.com/forums/viewtopic.php?t=1555
securityfocus.com/bid/15568
rgod.altervista.org/efiction2_xpl.html
secunia.com/advisories/17777
securitytracker.com/id?1015273
securityreason.com/securityalert/206
archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
nvd.nist.gov/vuln/detail/CVE-2005-4174
github.com/advisories/GHSA-92v9-v65f-f4q8