CVE-2005-2793

Description

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter.

How to fix CVE-2005-2793

To remediate CVE-2005-2793, upgrade the affected package to a fixed version below.

• Debian/phpldapadmin—upgrade to 0.9.6c-7 or later

Is CVE-2005-2793 being exploited?

Low — EPSS is 2.9%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 0.9.6c-7

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-2793