CVE-2005-3097 in contribute.cgi

Summary

Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir variable.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 09/28/2005
• Disclosure: 09/28/2005
• Moderation: VulDB entry created
• Entries: 1: VDB-26452
• CPE: ready
• CWE: CWE-22 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00360
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3097
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3097
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3097/