CVE-2005-0411 | BDVDB-2026-8251 Detail

Description#

Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031710.html

Exploit#

No public exploit known

History#

Version 12005-02-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.