CVE-2004-2255

Published: Dec 31, 2004Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.

Affected (1)

Products: Phpmyfaq: Phpmyfaq

Phpmyfaq

1 product

Phpmyfaq

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phpmyfaq Phpmyfaq	Version 1.3.12

References (14)

http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/11640

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1010190

Source: cve@mitre.org

http://www.osvdb.org/6300

Source: cve@mitre.org

Patch

http://www.phpmyfaq.de/advisory_2004-05-18.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/10374

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/16177

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html