CVE-2005-0411

Published: Feb 14, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter.

Affected (1)

Products: Citrusdb: Citrusdb

Citrusdb

1 product

Citrusdb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Citrusdb Citrusdb	Up to 0.3.6

References (4)

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031710.html

Source: cve@mitre.org

http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031710.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.