CVEvulnerability

CVE-2005-2169

5.0 MEDIUM Published 2005-07-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-07-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via ".../...//" sequences in the file parameter, which are reduced to "../" when PHPSource Printer uses a regular expression to remove "../" sequences.

Affected configurations

• kaf oseo quick and dirty phpsource printer 1.1

Related

Referenced by CWE · observed example (4)

  • CWE-182 Collapse of Data into Unsafe Value weakness
  • CWE-185 Incorrect Regular Expression weakness
  • CWE-23 Relative Path Traversal weakness
  • CWE-35 Path Traversal: '.../...//' weakness

References