CVE-2005-1621

3 documents3 sources

Severity

5.0MEDIUM

EPSS

0.9%

top 24.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Postnuke Software Foundation Postnuke

Timeline

PublishedMay 16

Latest updateMay 1

Description

Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read arbitrary files via a .. (dot dot) in the func parameter to index.php.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDpostnuke_software_foundation/postnuke4 versions+3

Patches

Patch: cvs.postnuke.com ↗Patch: cvs.postnuke.com ↗

🔴Vulnerability Details

GHSA

GHSA-5fxw-76jw-h76q: Directory traversal vulnerability in the pnModFunc function in pnMod↗2022-05-01

▶

CVEList

CVE-2005-1621: Directory traversal vulnerability in the pnModFunc function in pnMod↗2005-05-16

▶