CVE-2005-4593: Joshua Eichorn Phpdocumentor

High severity, CVSS 7.5. EPSS: 14.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary code via a URL in the (1) FORUM[LIB] parameter in Documentation/tests/bug-559668.php and (2) the root_dir parameter in docbuilder/file_dialog.php.

Affected products

• Joshua Eichorn Phpdocumentor: version 1.2 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.3_rc3 only; version 1.3_rc4 only

Published 2005-12-31. Last modified 2026-06-16.