CVE-2005-2616: Ezupload

High severity, CVSS 7.5. EPSS: 11.5% chance of exploitation in the next 30 days.

Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php.

Affected products

• Ezupload Ezupload: version 2.2 only

Published 2005-08-17. Last modified 2026-06-16.