CVE-2005-3038

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary drives, related to "the PHP vulnerability."

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://hostingcontroller.com/english/logs/hotfixlogv61_2_4.html
http://secunia.com/advisories/16824Patch, Vendor Advisory
http://www.securityfocus.com/bid/14840Patch
http://hostingcontroller.com/english/logs/hotfixlogv61_2_4.html
http://secunia.com/advisories/16824Patch, Vendor Advisory
http://www.securityfocus.com/bid/14840Patch

Timeline

Published: Sep 22, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-30397.5SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage par CVE-2005-30405.0Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remo CVE-2005-30415.0Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads."CVE-2005-30427.5miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass aut CVE-2005-30437.5SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dr CVE-2005-30442.1Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) CVE-2005-30457.5SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via CVE-2005-30466.8SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privilege CVE-2005-30474.3Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the CVE-2005-30486.4Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP fi CVE-2005-30495.0PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote CVE-2005-30505.0PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path