Unscored CVE-2005-0299 EUVD-2005-0300GHSA-9rpw-q7rj-xfj9

Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php.

References

gforge-dir-dirname-directory-traversal(18988) vdb-entry
12318 vdb-entry
20050120 STG Security Advisory: [SSA-20050120-24] GForge 3.x directory mailing-list
1012950 vdb-entry