CVE-2005-2893: Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions,...

Security readout for executives and security teams

CVE-2005-2893 is a remote code execution issue in PBLang 4.65, possibly earlier. A username value can be written into a PHP file that is later executed during login. For any remaining public PBLang instance, this is a serious compromise risk despite missing CVSS data. Exposure is likely limited to legacy PBLang deployments running version 4.65 or possibly earlier. The CVE record provides no CPEs or normalized affected product entries, so asset owners should confirm exposure through application inventory and version evidence. Treat confirmed exposure as urgent for legacy internet-facing systems. The risk is full application compromise, but the affected footprint may be small because the software is old and poorly represented in modern asset inventories. Mitigation focus: Identify and retire unsupported PBLang installations where possible.; Check vendor or archived project guidance for fixed versions or patches.; Restrict access to affected instances while remediation is assessed..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.