CVE-2005-3554: Phpkit

Medium severity, CVSS 5.1. EPSS: 3.4% chance of exploitation in the next 30 days.

Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables.

Affected products

• Phpkit Phpkit: version 1.6.1 only; version 1.6.02 only; version 1.6.03 only

Published 2005-11-16. Last modified 2026-06-16.