CVE-2005-2198

Published: Jul 11, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter.

Affected (9)

Products: Spid: Spid

Spid

1 product

Spid

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Spid Spid	Version 1.0.1
Spid Spid	Version 1.0.3
Spid Spid	Version 1.0.4
Spid Spid	Version 1.1.0
Spid Spid	Version 1.2.0
Spid Spid	Version 1.2.1
Spid Spid	Version 1.2.2
Spid Spid	Version 1.2.3
Spid Spid	Version 1.3.0