CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It may be remotely exploitable.
CVE
CVE-2005-0647
Severity
MEDIUM
CVSS
5
EPSS
4.15%
Original NVD Description
admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.