← Database

CVE-2005-3948

MEDIUM CVSS: 5.0 Published: 2005-12-01 Modified: 2026-06-16

Description

Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.

Affected Platforms

Phpalbum.Net Phpalbum

Weakness Type

NVD-CWE-Other

References