← Database

CVE-2005-2394

MEDIUM CVSS: 5.0 Published: 2005-07-27 Modified: 2026-06-16

Description

show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via an invalid archive parameter.

Affected Platforms

Cutephp Cutenews

Weakness Type

NVD-CWE-Other

References