CVE-2005-3330: The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Amp...

Security readout for executives and security teams

This is an old remote command execution issue in Snoopy 1.2, a PHP HTTP client bundled into several web applications. If an application lets an attacker influence an HTTPS URL passed to Snoopy, shell metacharacters could be mishandled and lead to server-side command execution. Exposure is most likely in legacy PHP applications or archived deployments that still include Snoopy 1.2, especially where user-controlled URLs are fetched over HTTPS. Modern installations may not be affected unless they retain the vulnerable bundled library. Treat this as high priority only where legacy PHP applications still bundle Snoopy 1.2 and fetch untrusted HTTPS URLs. For fully modernized stacks without Snoopy, urgency is low after verification. Mitigation focus: Inventory applications and vendored libraries for Snoopy 1.2.; Check project advisories and release notes for fixed versions.; Upgrade affected applications or replace vulnerable bundled Snoopy copies..

Prepared

Jun 29, 2026, 17:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.