Unscored severity · published Dec 31, 2004
CVE-2004-2255
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used…
–
CVSS
2%
EPSS
No
On KEV
Description
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpmyfaq · Phpmyfaq
1.3.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2255
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2255
Vendor Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html
Patch
http://secunia.com/advisories/11640
securitytracker.com
http://securitytracker.com/id?1010190
Patch
http://www.osvdb.org/6300
Vendor Advisory
http://www.phpmyfaq.de/advisory_2004-05-18.php
Patch
http://www.securityfocus.com/bid/10374
More from Phpmyfaq
9.8
CVE-2025-59943
phpMyFAQ duplicate email registration allows multiple accounts with the same email
9.8
CVE-2023-5865
Insufficient Session Expiration in thorsten/phpmyfaq
9.8
CVE-2023-5227
Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq
9.8
CVE-2023-4006
Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaq
9.8
CVE-2023-2429
Improper Access Control in thorsten/phpmyfaq