Vulnerabilities > CVE-2005-3026 - Directory Traversal vulnerability in EPay Pro

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
alstrasoft
NVD
Published: 2005-09-21
Updated: 2017-07-11

Summary

Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the read parameter.

Vulnerable Configurations

Part Description Count
Application
Alstrasoft
1

References