CVE-2005-1512: Pwsphp

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to upload and possibly execute arbitrary files.

Affected products

• Pwsphp Pwsphp: version 1.2.2 only

Published 2005-05-11. Last modified 2026-06-16.