CVE-2005-3948 in PHPAlbum

Summary

Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 12/01/2005
• Disclosure: 12/01/2005
• Moderation: VulDB entry created
• Entries: VDB-27227 (1)
• CPE: ready
• CWE: CWE-22 (Confirmed)
• Exploit: Download
• CVSS: 5.3
• EPSS: 0.03854
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3948
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3948
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3948/