1. CVE-Search
  2. CVE-2005-2256
ID CVE-2005-2256
Summary Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:phppgadmin:phppgadmin:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:phppgadmin:phppgadmin:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:phppgadmin:phppgadmin:3.2:*:*:*:*:*:*:*
    cpe:2.3:a:phppgadmin:phppgadmin:3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:phppgadmin:phppgadmin:3.3:*:*:*:*:*:*:*
    cpe:2.3:a:phppgadmin:phppgadmin:3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:phppgadmin:phppgadmin:3.4:*:*:*:*:*:*:*
    cpe:2.3:a:phppgadmin:phppgadmin:3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:phppgadmin:phppgadmin:3.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:phppgadmin:phppgadmin:3.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:phppgadmin:phppgadmin:3.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:phppgadmin:phppgadmin:3.5.3:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 05-09-2008 - 20:51)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 14142
confirm http://sourceforge.net/project/shownotes.php?release_id=342261
debian DSA-759
misc http://www.vuxml.org/freebsd/88188a8c-eff6-11d9-8310-0001020eed82.html
mlist [Dailydave] 20050704 !!! pre-authenticated remote code inclusion vulnerability inside phppgadmin !!!
sectrack 1014414
secunia
  • 15941
  • 16116
Last major update 05-09-2008 - 20:51
Published 13-07-2005 - 04:00
Last modified 05-09-2008 - 20:51
Back to Top