CVE-2005-2001 Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) in the action parameter.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) in the action parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php arena pafiledb | = 1.1.3 | No fix listed |
| php arena pafiledb | = 2.1.1 | No fix listed |
| php arena pafiledb | = 3.0 | No fix listed |
| php arena pafiledb | = 3.0_beta_3.1 | No fix listed |
| php arena pafiledb | = 3.1 | No fix listed |
References
- 20050615 Multiple paFileDB Vulnerabilities mailing-list
- www.gulftech.org exploit patch
- www.phparena.net patch
- www.phparena.net patch