peter bassill · operator
$ cve CVE-2005-3048 JSON

CVE-2005-3048 EXPLOIT

6.4
MEDIUM · CVSS 2.0 · EPSS 8.3% (pctl 95)

Patch early

A public exploit exists.

Description

Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE parameter, which also allows direct code injection via the User Agent field in a request packet, which can be activated by using LANGCODE to reference the user tracking data file.

Scoring

CVSS6.4 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS8.31% — more likely to be exploited than 95% of all CVEs
On CISA KEVno
Public exploityes
Published2005-09-24
Last modified2026-06-16

Affected (1)

VendorProduct
phpmyfaqphpmyfaq

Public exploits

SourceTitleDate
exploit-dbphpMyFAQ 1.5.1 - 'User-Agent' Remote Shell Injection2005-09-23

References

→ the Explorer  ·  watch your stack  ·  NVD