Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2005-2256

Published: 13/07/2005 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote malicious users to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

phppgadmin phppgadmin 3.1

phppgadmin phppgadmin 3.5.3

phppgadmin phppgadmin 3.2

phppgadmin phppgadmin 3.3

phppgadmin phppgadmin 3.4

phppgadmin phppgadmin 3.4.1

Vendor Advisories

Debian Security Advisories: DSA-759-1 phppgadmin -- missing input sanitising
A vulnerability has been discovered in phppgadmin, a set of PHP scripts to administrate PostgreSQL over the WWW, that can lead to disclose sensitive information Successful exploitation requires that "magic_quotes_gpc" is disabled The old stable distribution (woody) is not affected by this problem For the stable distribution (sarge) this problem ...

Exploits

Exploit DB: phpPgAdmin 3.x - Login Form Directory Traversal
source: wwwsecurityfocuscom/bid/14142/info phpPgAdmin is prone to a directory traversal vulnerability The application fails to filter directory traversal sequences from requests to the login form All versions of phpPgAdmin are considered to be vulnerable at the moment formUsername=username&formPassword=password&formServer=0& ...

References

NVD-CWE-Otherhttp://www.securityfocus.com/bid/14142http://securitytracker.com/id?1014414http://secunia.com/advisories/15941http://www.vuxml.org/freebsd/88188a8c-eff6-11d9-8310-0001020eed82.htmlhttp://archives.neohapsis.com/archives/dailydave/2005-q3/0010.htmlhttp://www.debian.org/security/2005/dsa-759http://sourceforge.net/project/shownotes.php?release_id=342261http://secunia.com/advisories/16116https://nvd.nist.govhttps://www.debian.org/security/./dsa-759https://www.exploit-db.com/exploits/25938/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30043cameraCVE-2023-40404CVE-2024-2793client sideCVE-2024-4469CVE-2024-3565CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook