6.4
CVSSv2

CVE-2005-3878

Published: 29/11/2005 Updated: 08/03/2011
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 645
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and previous versions allows remote malicious users to access or include arbitrary files via a .. (dot dot) in the show parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

alex king php doc system

Exploits

source: wwwsecurityfocuscom/bid/15611/info PHP Doc System is prone to a local file-include vulnerability This is due to the application's failure to properly sanitize user-supplied input This may facilitate the unauthorized viewing of files and unauthorized execution of local PHP code PHP Doc System 151 and prior versions are repor ...