CVE-2005-3639

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17580Patch, Vendor Advisory
http://www.securityfocus.com/bid/15404
http://www.vupen.com/english/advisories/2005/2451
http://secunia.com/advisories/17580Patch, Vendor Advisory
http://www.securityfocus.com/bid/15404
http://www.vupen.com/english/advisories/2005/2451

Timeline

Published: Nov 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-364010.0Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary c CVE-2005-36417.5Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a val CVE-2005-36427.5IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authenticatio CVE-2005-36437.5IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on CVE-2005-36447.8PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows r CVE-2005-36455.0phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sen CVE-2005-36467.5Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote at CVE-2005-36474.6Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory.CVE-2005-36487.5Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary CVE-2005-36492.6jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.CVE-2005-36509.3The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows CVE-2005-36517.5Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly