CVE catalog

CVE-2005-0887

dcl: CVE-2005-0887

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
2.74% · Oct 25, 2026

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandclsid7.5.3-1not affected
Debiandclforky7.5.3-1not affected
Debiandcltrixie7.5.2-1not affected
Debiandclbookworm7.5.1-1not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebiandclsourcesidNot affectedunimportantNot reportedNot reported
DebiandclsourceforkyNot affectedunimportantNot reportedNot reported
DebiandclsourcetrixieNot affectedunimportantNot reportedNot reported
DebiandclsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dcl-f77]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

  • [dcl-f77-docs]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

  • [fonts-dclfonts]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

  • [libf77dcl7]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · amd64 · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · arm64 · bookworm

      Not affected

      dsa · dcl · debian · bookworm

  • [libf77dcl-dev]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · amd64 · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · arm64 · bookworm

      Not affected

      dsa · dcl · debian · bookworm

Observed:

References