CVE-2005-2203: Phpwishlist

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php.

Affected products

• Phpwishlist Phpwishlist: version 0.1.9 only; version 0.1.10 only; version 0.1.11 only; version 0.1.12 only; version 0.1.13 only; version 0.1.14 only

Published 2005-07-11. Last modified 2026-06-16.