CVE-2005-4424

Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .

published December 20, 2005

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01724 · 77.3th percentile
Published
2005-12-20T11:00Z
EPSS history
Timeline
  • 20 DEC 11:00Z
    Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .
    cvelistv5