CVE-2005-0647

MEDIUM 5.0CVE-2005-0647 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0647 is a MEDIUM (CVSS 5.0) vulnerability affecting panews (php arena).
Chance of exploitation in the next 30 days (EPSS): 4.2%, higher than 90.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
panews php_arena	`= 2.0.4b`	No fix yet

Description

admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.

References

marc.info
kernelpanik.org/docs/kernelpanik/panews.txt

More vulnerabilities in panews

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free