CVE-2005-1840 Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the lan...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpcms | = 1.2.0 | No fix listed |
| phpcms | = 1.2.1 | No fix listed |
| phpcms | = 1.2.1_p12 | No fix listed |
| phpcms | = 1.2.1_pl1 | No fix listed |
References
- cvs.sourceforge.net patch vendor-advisory
- 20050602 SEC-CONSULT SA20050602-1 :: Arbitrary File Inclusion in phpCMS 1.2.x mailing-list
- 15586 third-party-advisory
- www.phpcms.de patch vendor-advisory