CVE-2005-4173: Efiction Project Efiction

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.

Affected products

• Efiction Project Efiction: version 1.0 only; version 1.1 only; version 2.0 only

Published 2005-12-11. Last modified 2026-06-16.