CVE-2005-4319

Published: Dec 17, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter.

Affected (1)

Products: Limbo Cms: Limbo Cms

Limbo Cms

1 product

Limbo Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Limbo Cms Limbo Cms	Up to 1.0.4.2

References (16)

http://rgod.altervista.org/limbo1042_xpl.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/18063/

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/255

Source: cve@mitre.org

http://securitytracker.com/id?1015364

Source: cve@mitre.org

Exploit

http://www.osvdb.org/21755

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/419470/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15871/

Source: cve@mitre.org

ExploitPatch

http://www.vupen.com/english/advisories/2005/2932

Source: cve@mitre.org

http://rgod.altervista.org/limbo1042_xpl.html