Vulnerability record · CVE-2005-0862 · published 2 May 2005

CVE-2005-0862: Phpopenchat vulnerability

Phpopenchat · Phpopenchat

Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php.

7.5 CVSS 2.0 High EPSS 11% · top 4.3%

7.5CVSS 2.0 base score

11%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

20References, 4 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Phpopenchat Phpopenchat

References

Link	Tags
http://secunia.com/advisories/14600	Vendor Advisory
http://securitytracker.com/id?1013434	Exploit
http://www.albanianhaxorz.org/advisory/phpopenchaten.txt
http://www.osvdb.org/14807
http://www.osvdb.org/14808
http://www.osvdb.org/14809
http://www.securityfocus.com/archive/1/465237/100/0/threaded
http://www.securityfocus.com/bid/12817
http://www.zone-h.org/advisories/read/id=7310	ExploitVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19721
http://secunia.com/advisories/14600	Vendor Advisory
http://securitytracker.com/id?1013434	Exploit
http://www.albanianhaxorz.org/advisory/phpopenchaten.txt
http://www.osvdb.org/14807
http://www.osvdb.org/14808
http://www.osvdb.org/14809
http://www.securityfocus.com/archive/1/465237/100/0/threaded
http://www.securityfocus.com/bid/12817
http://www.zone-h.org/advisories/read/id=7310	ExploitVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19721

Track CVE-2005-0862 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-4677Phpopenchat vulnerabilityPHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code v…EPSS 1.6%11 Sep 2006 4.3CVE-2005-2545Phpopenchat vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) ti…EPSS 1.7%10 Aug 2005 4.3CVE-2005-0863Phpopenchat vulnerabilityCross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter param…EPSS 1.7%2 May 2005

Source: NIST National Vulnerability Database (record CVE-2005-0862), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.