CVE-2005-3789: Medium severity Phpwcms Phpwcms vulnerability
Published Nov 24, 2005
·Updated
Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) formlang parameter in login.php and (2) the imgdir parameter in randomimage.php.
Affected Software
1 affected component
Phpwcms Phpwcms=1.2.5_dev
Event History
Nov 24, 2005
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3789?
CVE-2005-3789 is considered a high severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2005-3789?
To fix CVE-2005-3789, update phpwcms to the latest version that addresses these directory traversal vulnerabilities.
3
Which versions are affected by CVE-2005-3789?
CVE-2005-3789 affects phpwcms version 1.2.5 and prior versions.
4
What types of attacks are possible with CVE-2005-3789?
CVE-2005-3789 allows remote attackers to read arbitrary files from the server using directory traversal techniques.
5
Is CVE-2005-3789 still a risk today?
While CVE-2005-3789 is an older vulnerability, it can still pose a risk if the affected software is in use and not updated.