CVE-2005-2255

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-07-13 · updated 2026-06-16

Description

Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to (1) index.php or (2) admin/index.php.

Affected products

Gianluca Baldo Phpauction: 2.5

References

http://secunia.com/advisories/15967
http://securitytracker.com/id?1014423
http://secunia.com/advisories/15967
http://securitytracker.com/id?1014423

Get alerted when CVE-2005-2255 or the next vulnerability affects your stack