CVE: CVE-2005-2147

Export to Word

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00425
Percentile: 0.61377

CVSS Scoring

CVSS v2 Score: 6.4

Severity:

Affected Products

cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*

← Back to Home