← Database

CVE-2004-2255

MEDIUM CVSS: 6.4 Published: 2004-12-31 Modified: 2026-06-16

Description

Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.

Affected Platforms

Phpmyfaq Phpmyfaq

Weakness Type

NVD-CWE-Other

References