CVE-2005-1840

NONE
Published Jun 2, 200521y ago · Modified Jun 16, 20262w ago
Find Similar
Published Jun 2, 2005 21y ago
Last Modified Jun 16, 2026 2w ago

Description

Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 4

VendorProductVersionRange
phpcmsphpcms1.2.0any
phpcmsphpcms1.2.1any
phpcmsphpcms1.2.1_p12any
phpcmsphpcms1.2.1_pl1any

References 4

  • cvs.sourceforge.net http://cvs.sourceforge.net/viewcvs.py/phpcms/phpcms/parser/include/class.layout_phpcms.php?rev=1.12.2.37&view=markup
    PatchVendor Advisory
  • marc.info http://marc.info/?l=bugtraq&m=111773774916907&w=2
  • secunia.com http://secunia.com/advisories/15586
  • phpcms.de http://www.phpcms.de/download/index.en.html
    PatchVendor Advisory

Remediation

  • cvs.sourceforge.net http://cvs.sourceforge.net/viewcvs.py/phpcms/phpcms/parser/include/class.layout_phpcms.php?rev=1.12.2.37&view=markup
    PatchVendor Advisory
  • phpcms.de http://www.phpcms.de/download/index.en.html
    PatchVendor Advisory