CVE-2005-3929

Description

Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php.

References

http://www.vupen.com/english/advisories/2005/2665

http://www.securityfocus.com/archive/1/418209/100/0/threaded

http://www.securityfocus.com/archive/1/418191/100/0/threaded

http://www.securityfocus.com/archive/1/418087/100/0/threaded

http://securityreason.com/securityalert/217

http://secunia.com/advisories/17788

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3