debian · CVE-2005-2256

Quick triage

参照： Official debian advisory, NVD, CVE.org · CVE 詳細

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2005-2256 medium priority: Debian including 1 source packages (phppgadmin), 3 status rows across 3 suites (forky, sid, trixie): resolved 3.

Description:

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.