CVE-2005-2147

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*

Information

Published : 2005-07-05 21:00

Updated : 2008-09-05 13:51


NVD link : CVE-2005-2147

Mitre link : CVE-2005-2147


JSON object : View

Advertisement

dedicated server usa

Products Affected

edgewall_software

  • trac