CVE-2005-1870: Popper

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to execute arbitrary PHP code via the form parameter.

Affected products

• Popper Popper: version 1.41_r2 only

Published 2005-06-09. Last modified 2026-06-16.