← Database

CVE-2005-1699

MEDIUM CVSS: 4.0 Published: 2005-05-24 Modified: 2026-06-16

Description

Directory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to read arbitrary files via a .. (dot dot) in the skin parameter.

Affected Platforms

Postnuke Software Foundation Postnuke

Weakness Type

NVD-CWE-Other

References