CVE-2005-2256: Medium severity phppgadmin phppgadmin vulnerability
Published Jul 13, 2005
·Updated
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.
Affected Software
6 affected components
phpPgAdmin phpPgAdmin=3.1
phpPgAdmin phpPgAdmin=3.2
phpPgAdmin phpPgAdmin=3.3
phpPgAdmin phpPgAdmin=3.4
phpPgAdmin phpPgAdmin=3.4.1
phpPgAdmin phpPgAdmin=3.5.3
Event History
Jul 13, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2256?
CVE-2005-2256 is classified with a moderate severity due to its potential for directory traversal attacks.
2
How do I fix CVE-2005-2256?
To fix CVE-2005-2256, upgrade phpPgAdmin to version 3.5.4 or later where this vulnerability has been addressed.
3
What versions of phpPgAdmin are affected by CVE-2005-2256?
CVE-2005-2256 affects phpPgAdmin versions 3.1 to 3.5.3.
4
What kind of attack does CVE-2005-2256 enable?
CVE-2005-2256 allows remote attackers to perform directory traversal attacks to access arbitrary files.
5
Is CVE-2005-2256 a known vulnerability?
Yes, CVE-2005-2256 is a known vulnerability that has been documented and reported publicly.