CVE-2005-3086

Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2005-09-27

Last modified

2024-09-17

Affected products

• Contentserv (Contentserv)

References

• http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0650.html
• http://secunia.com/advisories/16929
• http://www.securityfocus.com/bid/14943