Directory Traversal Vulnerabilities in phpwcms by phpwcms GmbH
CVE-2005-3789
Currently unrated
What is CVE-2005-3789?
The vulnerability in phpwcms 1.2.5 allows remote attackers to access sensitive files on the server by exploiting directory traversal flaws. Attackers can manipulate the 'form_lang' parameter in 'login.php' and the 'imgdir' parameter in 'random_image.php' to traverse directories, effectively reading arbitrary files. This poses a significant risk for data exposure and can lead to further exploitation of the web application. Proper validation and sanitization of input parameters are crucial to safeguard against such threats.