CVE-2005-2633
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, ...
CVE-2005-2633 is a high vulnerability (CVSS 7.5) in Phptb Topic Boards, published August 20, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.90%, the 87th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.90%EPSS, 87th percentile
- Exploitation
- None known5 public exploits
- Fixed in
- No fix listedNo source names one
Description
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHPTB Topic Board 2.0 - 'admin_o.php?absolutepath' Remote File Inclusion | 2005-08-17 |
| Exploit-DB | PHPTB Topic Board 2.0 - 'board_o.php?absolutepath' Remote File Inclusion | 2005-08-17 |
| Exploit-DB | PHPTB Topic Board 2.0 - 'dev_o.php?absolutepath' Remote File Inclusion | 2005-08-17 |
| Exploit-DB | PHPTB Topic Board 2.0 - 'file_o.php?absolutepath' Remote File Inclusion | 2005-08-17 |
| Exploit-DB | PHPTB Topic Board 2.0 - 'tech_o.php?absolutepath' Remote File Inclusion | 2005-08-17 |
What each source reports
NVD Score used
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.
- Record
CVE-2005-2633- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.
- Record
CVE-2005-2633- Updated
- 2026-11-02
EUVDEUVD-2005-2634No score
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.
- Record
EUVD-2005-2634- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jr6j-q72x-3jfrNo score
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, ...
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.
- Record
GHSA-jr6j-q72x-3jfr- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.