Unscored CVE-2005-3680 EUVD-2005-3677GHSA-m685-cgj3-vw9m

Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files vi…

Published Nov 18, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter.

References

17573 third-party-advisory
15406 vdb-entry
20051112 XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads mailing-list
ADV-2005-2428 vdb-entry