CVE-2005-2256
CVE-2005-2256
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.
EPSS 4.6% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phppgadmin Debian:13
- Affected ranges
- ECOSYSTEM: < 3.5.4-1
Update to 3.5.4-1
phppgadmin Debian:14
- Affected ranges
- ECOSYSTEM: < 3.5.4-1
Update to 3.5.4-1
Original sources
- http://www.debian.org/security/2005/dsa-759
- http://archives.neohapsis.com/archives/dailydave/2005-q3/0010.html
- http://www.vuxml.org/freebsd/88188a8c-eff6-11d9-8310-0001020eed82.html
- http://www.securityfocus.com/bid/14142
- http://securitytracker.com/id?1014414
- http://secunia.com/advisories/16116
- http://sourceforge.net/project/shownotes.php?release_id=342261
- http://secunia.com/advisories/15941
- https://nvd.nist.gov/vuln/detail/CVE-2005-2256