Description
The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
References
- 20050424 remote command execution in forum.pl script mailing-list
Unscored
CVE-2005-1353
EUVD-2005-1356GHSA-4hrr-fwmm-w8pp
The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
Published Apr 28, 2005 · Updated Aug 7, 2024 · Assigned by mitre