CVE-2005-3592 | BDVDB-2026-13320 Detail

Description#

index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the application by triggering an error message, such as by entering multiple ../ (dot dot slash) in the archive parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=113140342029880&w=2
http://www.securityinfo.ru/2005/11/____cutenews_140.html

Exploit#

No public exploit known

History#

Version 12005-11-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.