Description

Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter.

Remediation

References

CVE-2005-3680

Related Vulnerabilities

Oracle HTTP Server CVE-2020-2952 Vulnerability (CVE-2020-2952)

Oracle HTTP Server CVE-2018-2760 Vulnerability (CVE-2018-2760)

WordPress Plugin stripShow SQL Injection (2.5.2)

Internet Information Services Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-4078)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32475)

Severity

Medium

Classification

CVE-2005-3680

Tags

Missing Update Known Vulnerabilities