CVE-2005-0678

HIGH 7.5CVE-2005-0678 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0678 is a HIGH (CVSS 7.5) vulnerability affecting form mail script (stadtaus).
Chance of exploitation in the next 30 days (EPSS): 2.8%, higher than 86.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
form mail script stadtaus	`≤ 2.3`	No fix yet

Description

PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code.

References

marc.info
secunia.com/advisories/14505 · Patch
securitytracker.com/id · Exploit
stadtaus.com/forum/t-1579.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free