PT-2005-4622 · Php · Php Doc System

Published 2005-11-29 · Updated 2011-03-08 · CVE-2005-3878

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP Doc System versions 1.5.1 and earlier

Description The issue allows remote attackers to access or include arbitrary files via a .. (dot dot) in the show parameter of the index.php file.

Recommendations For PHP Doc System versions 1.5.1 and earlier, consider restricting access to the index.php file or validating the show parameter to prevent directory traversal attacks until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-3878

Affected Products

Php Doc System

References · 6

• 🔥 https://exploit-db.com/exploits/26643 · Exploit
• http://secunia.com/advisories/17745 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3878 · Security Note
• http://pridels0.blogspot.com/2005/11/php-doc-system-151-local-file.html · Note
• http://securityfocus.com/bid/15611 · Note
• http://vupen.com/english/advisories/2005/2622 · Note