Unscored CVE-2005-2001 EUVD-2005-2003GHSA-92m4-g4mr-whg7

Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. (…

Published Jun 20, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) in the action parameter.

References

http://www.phparena.net/
20050615 Multiple paFileDB Vulnerabilities mailing-list
http://www.phparena.net/pafiledb_patch/
http://www.gulftech.org/?node=research&article_id=00082-06142005