AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2005-4423

MEDIUM · CVSS 6.5 EPSS 2.87%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-20 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.

CVE
CVE-2005-4423
Severity
MEDIUM
CVSS
6.5
EPSS
2.87%

Original NVD Description

Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to an accessible directory, as demonstrated using a file with a .php extension, aka "upload phpshell."