CVE-2005-2952 | BDVDB-2026-12490 Detail

Description#

Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/14817
http://securityreason.com/securityalert/4
http://www.h4cky0u.org/advisories/HYA-2005-007-subscribe-me-pro.txt
http://secunia.com/advisories/16796/
https://exchange.xforce.ibmcloud.com/vulnerabilities/22249
http://marc.info/?l=bugtraq&m=112662785418368&w=2

Exploit#

No public exploit known

History#

Version 12005-09-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.