VulnerabilityModified
CVE-2005-3878
Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or include arbitrary files via a ..
MEDIUM 6.4EPSS 2.58%
Does this matter?
Lower severity and a low EPSS score (2.58%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or include arbitrary files via a .. (dot dot) in the show parameter.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 2.58% probability · 84th percentile
- CISA KEV
- Not listed
- Affected
- alex king/php doc system
- Source
- cve@mitre.org
References
- http://pridels0.blogspot.com/2005/11/php-doc-system-151-local-file.html
- http://secunia.com/advisories/17745Vendor Advisory
- http://www.securityfocus.com/bid/15611
- http://www.vupen.com/english/advisories/2005/2622
- http://pridels0.blogspot.com/2005/11/php-doc-system-151-local-file.html
- http://secunia.com/advisories/17745Vendor Advisory
- http://www.securityfocus.com/bid/15611
- http://www.vupen.com/english/advisories/2005/2622
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.