CVE-2005-3860

PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athena_dir parameter.

• CWE-94

• http://securityreason.com/securityalert/208
• http://securitytracker.com/id?1015278
• http://sourceforge.net/forum/forum.php?forum_id=514746Exploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/417796/100/0/threaded
• http://www.securityfocus.com/bid/15574Exploit
• http://www.vupen.com/english/advisories/2005/2599Vendor Advisory
• http://securityreason.com/securityalert/208
• http://securitytracker.com/id?1015278
• http://sourceforge.net/forum/forum.php?forum_id=514746Exploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/417796/100/0/threaded
• http://www.securityfocus.com/bid/15574Exploit
• http://www.vupen.com/english/advisories/2005/2599Vendor Advisory

Published

Nov 29, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3854Cross-site scripting (XSS) vulnerability in index.php in Eas…
• CVE-2005-3855SQL injection vulnerability in process.php in 1-2-3 music st…
• CVE-2005-3856The Popular URL capability (popularurls.cpp) in Krusader 1.6…
• CVE-2005-3857The time_out_leases function in locks.c for Linux kernel bef…
• CVE-2005-3858Memory leak in the ip6_input_finish function in ip6_input.c …
• CVE-2005-3859PHP remote file inclusion vulnerability in q-news.php in Q-N…
• CVE-2005-3861PHP remote file inclusion vulnerability in content.php in ph…
• CVE-2005-3862Buffer overflow in unalz before 0.53 allows remote attackers…
• CVE-2005-3863Stack-based buffer overflow in kkstrtext.h in ktools library…
• CVE-2005-3864SQL injection vulnerability in index.php in SourceWell 1.1.2…
• CVE-2005-3865SQL injection vulnerability in index.php in AllWeb search 3.…
• CVE-2005-3866Cross-site scripting (XSS) vulnerability in SearchFeed Searc…