CVE-2005-0775: Photopost PHP Pro

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator.

Affected products

  • Photopost Photopost PHP Pro: version 5.0_rc3 only

Published 2005-05-02. Last modified 2026-06-16.