CVE-2005-2951

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" (trailing null byte) characters in the l parameter, which is used in an include_once statement.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=112662698511403&w=2
http://rgod.altervista.org/azdg.htmlExploit, Vendor Advisory
http://secunia.com/advisories/16814/Vendor Advisory
http://securityreason.com/securityalert/5
http://www.securityfocus.com/bid/14819Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22258
http://marc.info/?l=bugtraq&m=112662698511403&w=2
http://rgod.altervista.org/azdg.htmlExploit, Vendor Advisory
http://secunia.com/advisories/16814/Vendor Advisory
http://securityreason.com/securityalert/5
http://www.securityfocus.com/bid/14819Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/22258

Timeline

Published: Sep 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-29525.0Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a ..CVE-2005-29534.3Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML v CVE-2005-29547.5SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands vi CVE-2005-29554.6config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which al CVE-2005-29565.0ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and pre CVE-2005-29577.5Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows rem CVE-2005-29587.5Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute ar CVE-2005-29594.6Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environ CVE-2005-29602.1cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a differe CVE-2005-29617.5Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remot CVE-2005-29622.1The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users t CVE-2005-29637.5The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use