Back
CVE-2005-3048
Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE parameter, which also allows direct code injection via the User Agent field in a request packet, which can be activated by using LANGCODE to reference the user tracking data file.
Published: Sep 24, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| phpmyfaq | phpmyfaq | 1.5.1 |
GitHub Security Advisory GHSA-4447-hm8w-ggf7
Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read...
Risk Scores
CVSS Score
6.4 / 10
EPSS Score
8.31%
Top 6% most likely to be exploited
Threat Score
28.1 / 100
Data Sources
NVD
EPSS
GitHub