CVE-2005-4319 Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter.
MediumCVSS 5.0
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| limbo cms | <= 1.0.4.2 | No fix listed |
References
- rgod.altervista.org exploit vendor-advisory
- 18063 patch third-party-advisory vendor-advisory
- 255 third-party-advisory
- 1015364 exploit vdb-entry
- 21755 vdb-entry
- 20051214 LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / remote code execution mailing-list
- 15871 exploit patch vdb-entry
- ADV-2005-2932 vdb-entry