CVE-2004-1505
published 2004-12-31CVE-2004-1505: Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute…
PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.00%
78.2th percentile
Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| salims_softhouse | jaf_cms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://echo.or.id/adv/adv08-y3dips-2004.txthttp://marc.info/?l=bugtraq&m=110004150430309&w=2http://secunia.com/advisories/13104http://www.securityfocus.com/bid/11627https://exchange.xforce.ibmcloud.com/vulnerabilities/17983http://echo.or.id/adv/adv08-y3dips-2004.txthttp://marc.info/?l=bugtraq&m=110004150430309&w=2http://secunia.com/advisories/13104http://www.securityfocus.com/bid/11627https://exchange.xforce.ibmcloud.com/vulnerabilities/17983
2004-12-31
Published