1. CVE-Search
  2. CVE-2005-4467
ID CVE-2005-4467
Summary Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*
  • cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*
  • cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*
  • cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*
  • cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*
  • cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*
  • cpe:2.3:a:phpgedview:phpgedview:2.65.2:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:2.65.2:*:*:*:*:*:*:*
  • cpe:2.3:a:phpgedview:phpgedview:2.65_beta5:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:2.65_beta5:*:*:*:*:*:*:*
  • cpe:2.3:a:phpgedview:phpgedview:3.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:phpgedview:phpgedview:3.3.7:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 19-10-2018 - 15:41)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 15983
bugtraq 20051220 PHPGedView <= 3.3.7 remote code execution
confirm
misc http://rgod.altervista.org/phpgedview_337_xpl.html
osvdb 22009
sectrack 1015395
secunia 18177
vupen ADV-2005-3033
xf phpgedview-helptextvars-file-include(23871)
Last major update 19-10-2018 - 15:41
Published 22-12-2005 - 00:03
Last modified 19-10-2018 - 15:41
Back to Top