CVE-2005-1117: ALL4WWW ALL4WWW-Homepagecreator

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code.

Affected products

• ALL4WWW ALL4WWW-Homepagecreator: version 1.0a only

Published 2005-05-02. Last modified 2026-06-16.