CVE-2005-2607: Phpsimplicity Simplicity Of Upload

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.

Affected products

• Phpsimplicity Simplicity Of Upload: version 1.3 only

Published 2005-08-17. Last modified 2026-06-16.