CVE-2005-2255
Last modified
CVE-2005-2255 is a vulnerability of currently unknown severity. Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to (1) index.php or (2) admin/index.php.. EPSS estimates a 1.51% chance of exploitation in the next 30 days.
Description
Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to (1) index.php or (2) admin/index.php.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gianluca Baldo | Phpauction | 2.5 |
References
- http://securitytracker.com/id?1014423Exploit, Vendor Advisory
- http://securitytracker.com/id?1014423Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2255?
How severe is CVE-2005-2255?
How do I fix CVE-2005-2255?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2249Multiple unknown vulnerabilities in Jinzora 2.0.1 have unkno…
- CVE-2005-2250Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Aff…
- CVE-2005-2251PHP remote file inclusion vulnerability in secure.php in PHP…
- CVE-2005-2252PhpAuction 2.5 allows remote attackers to bypass authenticat…
- CVE-2005-2253SQL injection vulnerability in PhpAuction 2.5 allow remote a…
- CVE-2005-2254Multiple cross-site scripting (XSS) vulnerabilities in PhpAu…
- CVE-2005-2256Encoded directory traversal vulnerability in phpPgAdmin 3.1 …
- CVE-2005-2257The saveProfile function in PhpSlash 0.8.0 allows remote att…
- CVE-2005-2258PHP remote file inclusion vulnerability in photolist.inc.php…
- CVE-2005-2259The dispallclosed2 function in dispallclosed.pl for multiple…
- CVE-2005-2260The browser user interface in Firefox before 1.0.5, Mozilla …
- CVE-2005-2261Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla befo…
Are you affected by CVE-2005-2255?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST