Vulnerabilities > CVE-2005-2952 - Unspecified vulnerability in Subscribe ME PRO Subscribe ME PRO
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN subscribe-me-pro
exploit available
Summary
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Subscribe Me Pro 2.44 S.PL Remote Directory Traversal Vulnerability. CVE-2005-2952. Webapps exploit for php platform |
| id | EDB-ID:26252 |
| last seen | 2016-02-03 |
| modified | 2005-09-13 |
| published | 2005-09-13 |
| reporter | h4cky0u |
| source | https://www.exploit-db.com/download/26252/ |
| title | Subscribe Me Pro 2.44 S.PL Remote Directory Traversal Vulnerability |
References
- http://marc.info/?l=bugtraq&m=112662785418368&w=2
- http://marc.info/?l=bugtraq&m=112662785418368&w=2
- http://secunia.com/advisories/16796/
- http://secunia.com/advisories/16796/
- http://securityreason.com/securityalert/4
- http://securityreason.com/securityalert/4
- http://www.h4cky0u.org/advisories/HYA-2005-007-subscribe-me-pro.txt
- http://www.h4cky0u.org/advisories/HYA-2005-007-subscribe-me-pro.txt
- http://www.securityfocus.com/bid/14817
- http://www.securityfocus.com/bid/14817
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22249
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22249