CVE-2005-2169

Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via ".../...//" sequences in the file parameter, which are reduced to "../" when PHPSource Printer uses a regular expression to remove "../" sequences.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-07-06

Last modified

2024-09-17

Affected products

• Quick And Dirty Phpsource Printer (Kaf Oseo)

References

• http://guff.szub.net/2005/07/04/quick-and-dirty-security/
• http://secunia.com/advisories/15900
• http://securitytracker.com/id?1014376