PT-2005-2807

CVE-2005-1840

·

Published

2005-06-02

·

Updated

2016-10-18

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions phpCMS versions 1.2.x through 1.2.1pl1
Description A directory traversal issue exists, allowing remote attackers to read or include arbitrary files. This can be achieved by using a .. (dot dot) in the language parameter to "parser.php".
Recommendations For phpCMS versions 1.2.x through 1.2.1pl1, update to version 1.2.1pl2 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2005-1840
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com