CVE-2006-0315

index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers…

published January 19, 2006

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04948 · 92.1th percentile
Published
2006-01-19T01:00Z
EPSS history
Timeline
  • 19 JAN 01:00Z
    index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers…
    cvelistv5