CVE-2004-2256

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html
Vendor Advisory
http://secunia.com/advisories/11640
Patch
Vendor Advisory
http://securitytracker.com/id?1010190
Patch
http://www.phpmyfaq.de/advisory_2004-05-18.php
Vendor Advisory
http://www.securityfocus.com/archive/1/363636
http://www.securityfocus.com/bid/10377
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16223
http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html
Vendor Advisory
http://secunia.com/advisories/11640
Patch
Vendor Advisory
http://securitytracker.com/id?1010190
Patch
http://www.phpmyfaq.de/advisory_2004-05-18.php
Vendor Advisory
http://www.securityfocus.com/archive/1/363636
http://www.securityfocus.com/bid/10377
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16223

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha1:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04746

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9g2m-x5c8-j379

github

почти 4 года назад