← Database

CVE-2005-2686

HIGH CVSS: 7.5 Published: 2005-08-24 Modified: 2026-06-16

Description

Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via ".." sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.

Affected Platforms

Savewebportal Savewebportal

Weakness Type

NVD-CWE-Other

References