CVE-2005-3548

Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a .. (dot dot) in the "Task PHP File To Run" field.
Configurations

Configuration 1 (hide)

cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:02

Type Values Removed Values Added
References () http://secunia.com/advisories/17443 - Patch, Vendor Advisory () http://secunia.com/advisories/17443 - Patch, Vendor Advisory
References () http://www.osvdb.org/35429 - () http://www.osvdb.org/35429 -
References () http://www.securityfocus.com/archive/1/415798/30/0/threaded - () http://www.securityfocus.com/archive/1/415798/30/0/threaded -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/40000 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/40000 -

Information

Published : 2005-11-16 07:42

Updated : 2024-11-21 00:02


NVD link : CVE-2005-3548

Mitre link : CVE-2005-3548

CVE.ORG link : CVE-2005-3548


JSON object : View

Products Affected

invision_power_services

  • invision_board
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')