CVE-2005-2258: Squitosoft Squito Gallery

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter.

Affected products

• Squitosoft Squito Gallery: version 1.33 only

Published 2005-07-13. Last modified 2026-06-16.