Vulnerability CVE-2005-3929
Published: 2005-11-30   Modified: 2012-02-12

Description:
Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Xaraya <= 1.0.0 RC4 D.O.S / file corruption
retrogod alicepo...
01.12.2005

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Xaraya -> Xaraya 

 References:
http://rgod.altervista.org/xaraya1DOS.hmtl
http://securityreason.com/securityalert/217
http://www.securityfocus.com/archive/1/418087/100/0/threaded
http://www.securityfocus.com/archive/1/418191/100/0/threaded
http://www.securityfocus.com/archive/1/418209/100/0/threaded
http://www.securityfocus.com/bid/15623
http://www.vupen.com/english/advisories/2005/2665
Copyright 2024, cxsecurity.com

 

Back to Top