NVD

Id
69009  
Name
CVE-2005-3347  
Description
Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) sensor_program parameter or the (2) _SERVER[HTTP_ACCEPT_LANGUAGE] parameter, which overwrites an internal variable, a variant of CVE-2003-0536. NOTE: due to a typo in an advisory, an issue in osh was inadvertently linked to this identifier; the proper identifier for the osh issue is CVE-2005-3346.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-11-17  
Modified Date
2017-07-10  
Seq
2005-3347  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
356625 69009 CVE-2005-3347 DSA-897  View
356626 69009 CVE-2005-3347 DSA-898  View
356627 69009 CVE-2005-3347 DSA-899  View
356628 69009 CVE-2005-3347 GLSA-200511-18  View
356629 69009 CVE-2005-3347 http://www.hardened-php.net/advisory_212005.81.html  View
356630 69009 CVE-2005-3347 MDKSA-2005:212  View
356631 69009 CVE-2005-3347 20051115 Advisory 22/2005: Multiple vulnerabilities in phpSysInfo  View
356632 69009 CVE-2005-3347 15396  View
356633 69009 CVE-2005-3347 15414  View
356634 69009 CVE-2005-3347 phpsysinfo-registerglobal-data-manipulation(23107)  View

Related JVN