CVE-2005-2951

Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" (trailing null byte) characters in the l parameter, which is used in an include_once statement.

• http://marc.info/?l=bugtraq&m=112662698511403&w=2
• http://rgod.altervista.org/azdg.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/16814/Vendor Advisory
• http://securityreason.com/securityalert/5
• http://www.securityfocus.com/bid/14819Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22258
• http://marc.info/?l=bugtraq&m=112662698511403&w=2
• http://rgod.altervista.org/azdg.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/16814/Vendor Advisory
• http://securityreason.com/securityalert/5
• http://www.securityfocus.com/bid/14819Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22258

Published

Sep 16, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2945arc 5.21j and earlier create temporary files with world-read…
• CVE-2005-2946The default configuration on OpenSSL before 0.9.8 uses MD5 f…7.5
• CVE-2005-2947Buffer overflow in KillProcess 2.20 and earlier allows user-…
• CVE-2005-2948KillProcess 2.20 and earlier allows local users to bypass ki…
• CVE-2005-2949pam_per_user before 0.4 does not verify if the user name cha…
• CVE-2005-2950Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 th…
• CVE-2005-2952Directory traversal vulnerability in s.pl in Subscribe Me Pr…
• CVE-2005-2953Cross-site scripting (XSS) vulnerability in merchant.mvc in …
• CVE-2005-2954SQL injection vulnerability in password_reminder.php in ATut…
• CVE-2005-2955config.inc.php in ATutor 1.5.1, and possibly earlier version…
• CVE-2005-2956ATutor 1.5.1, and possibly earlier versions, stores temporar…
• CVE-2005-2957Stack-based buffer overflow in AVIRA Desktop for Windows 1.0…