CVE-2005-0536

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14360Patch, Vendor Advisory
http://securitytracker.com/id?1013260Patch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=307067Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-33.xmlPatch, Vendor Advisory
http://secunia.com/advisories/14360Patch, Vendor Advisory
http://securitytracker.com/id?1013260Patch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=307067Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-33.xmlPatch, Vendor Advisory

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-05377.5Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements CVE-2005-05385.0Directory traversal vulnerability in (1) GinpPictureServlet.java and (2) PicCollection.java in ginp (Java Photo Gallery Web Application) bef CVE-2005-05394.6Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related CVE-2005-05405.0Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /a CVE-2005-05417.5consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modi CVE-2005-05424.6saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser paramete CVE-2005-05434.3Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the str CVE-2005-05445.0phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparse CVE-2005-05457.2Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict a CVE-2005-05467.5Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imap CVE-2005-05474.6Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthoriz CVE-2005-05484.3Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary