CVE-2005-3507

None

CVSS

—

EPSS

12.4%

Published

Nov 6, 2005

CISA due date

—

The record

Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges via "../" sequences in the template parameter to (1) show_archives.php and (2) show_news.php.

Affected packages

Ecosystem	Package	Introduced	Fixed