CVE-2005-4319

Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-9jxx-wv7p-h3g3

Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote...

References (16)

• http://rgod.altervista.org/limbo1042_xpl.html Exploit, Vendor Advisory
• http://secunia.com/advisories/18063/ Patch, Vendor Advisory
• http://securityreason.com/securityalert/255
• http://securitytracker.com/id?1015364 Exploit
• http://www.osvdb.org/21755
• http://www.securityfocus.com/archive/1/419470/100/0/threaded
• http://www.securityfocus.com/bid/15871/ Exploit, Patch
• http://www.vupen.com/english/advisories/2005/2932
• http://rgod.altervista.org/limbo1042_xpl.html Exploit, Vendor Advisory
• http://secunia.com/advisories/18063/ Patch, Vendor Advisory
• http://securityreason.com/securityalert/255
• http://securitytracker.com/id?1015364 Exploit
• http://www.osvdb.org/21755
• http://www.securityfocus.com/archive/1/419470/100/0/threaded
• http://www.securityfocus.com/bid/15871/ Exploit, Patch