CVE-2005-4319

Опубликовано: 17 дек. 2005

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter.

Ссылки

http://rgod.altervista.org/limbo1042_xpl.html
Exploit
Vendor Advisory
http://secunia.com/advisories/18063/
Patch
Vendor Advisory
http://securityreason.com/securityalert/255
http://securitytracker.com/id?1015364
Exploit
http://www.osvdb.org/21755
http://www.securityfocus.com/archive/1/419470/100/0/threaded
http://www.securityfocus.com/bid/15871/
Exploit
Patch
http://www.vupen.com/english/advisories/2005/2932
http://rgod.altervista.org/limbo1042_xpl.html
Exploit
Vendor Advisory
http://secunia.com/advisories/18063/
Patch
Vendor Advisory
http://securityreason.com/securityalert/255
http://securitytracker.com/id?1015364
Exploit
http://www.osvdb.org/21755
http://www.securityfocus.com/archive/1/419470/100/0/threaded
http://www.securityfocus.com/bid/15871/
Exploit
Patch
http://www.vupen.com/english/advisories/2005/2932

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*

Версия до 1.0.4.2 (включая)

EPSS

Процентиль: 94%

0.14392

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9jxx-wv7p-h3g3

github

почти 4 года назад