QwikSec

Security Database

CVE

CWE

Training

CVE-2005-2951

Published: Sep 16, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" (trailing null byte) characters in the l parameter, which is used in an include_once statement.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SREASON

azdgdating-securityinc-code-execution(22258)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

http://rgod.altervista.org/azdg.html

x_refsource_MISC

20050913 AzDGDatingLite V 2.1.3 remote code execution

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.