CVE Vulnerabilities

CVE-2005-2256

Published: Jul 13, 2005 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via %2e%2e%2f (encoded dot dot) sequences in the formLanguage parameter.

Affected Software

Name Vendor Start Version End Version
Phppgadmin Phppgadmin 3.1 3.1
Phppgadmin Phppgadmin 3.2 3.2
Phppgadmin Phppgadmin 3.3 3.3
Phppgadmin Phppgadmin 3.4 3.4
Phppgadmin Phppgadmin 3.4.1 3.4.1
Phppgadmin Phppgadmin 3.5.3 3.5.3
Phppgadmin Ubuntu dapper *
Phppgadmin Ubuntu devel *
Phppgadmin Ubuntu edgy *
Phppgadmin Ubuntu feisty *

References