CVE-2005-3017: CONTENT2WEB

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure, SQL error messages, and cross-site scripting (XSS).

Affected products

• CONTENT2WEB CONTENT2WEB: version 1.0.1 only

Published 2005-09-21. Last modified 2026-06-16.