CVE-2005-4593: PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is en...

Security readout for executives and security teams

This is an old phpDocumentor issue that can let an attacker run code if vulnerable files are reachable and PHP register_globals is enabled. The source bundle identifies arbitrary code execution through remote file inclusion, but gives no CVSS score or confirmed active exploitation. Exposure is likely limited to web-accessible phpDocumentor 1.3.0 rc4 or earlier installations with register_globals enabled, especially where Documentation/tests or docbuilder scripts remain reachable. Prioritize remediation if phpDocumentor is deployed on internet-facing systems. The business risk is server compromise, but urgency depends on whether the old version and register_globals condition exist. Mitigation focus: Identify phpDocumentor 1.3.0 rc4 or earlier installations.; Disable register_globals where it remains enabled.; Remove unused phpDocumentor files from production web roots..

Prepared

Jun 29, 2026, 15:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.