CVE-2005-0980

HIGH 7.5CVE-2005-0980 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0980 is a HIGH (CVSS 7.5) vulnerability affecting epay (alstrasoft).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 85.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
epay alstrasoft	`= 2.0`	No fix yet

Description

PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code.

References

marc.info
secunia.com/advisories/14802 · Vendor Advisory
securityfocus.com/bid/12973 · Exploit

More vulnerabilities in epay

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free