CVE-2005-2635

Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.82% chance of exploitation in the next 30 days, 77th percentile

Published

2005-08-20

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityreason.com/adv/phpAdsnew.SR.16.asc

References

• CVE Record
• NVD entry

Related

• CVE-2005-2633
• CVE-2005-2637
• CVE-2005-2629
• CVE-2005-2638
• CVE-2005-2616
• CVE-2005-2639