Vulnerabilities > CVE-2005-4074 - Local File Include vulnerability in Mycfnuke CF Nuke 4.6

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
mycfnuke
exploit available
NVD
Published: 2005-12-08
Updated: 2017-07-20

Summary

Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to include arbitrary local .cfm files via a .. (dot dot) in the (1) sector or (2) page parameters.

Vulnerable Configurations

Part Description Count
Application
Mycfnuke
1

Exploit-Db

descriptionCF_Nuke 4.6 Index.CFM Local File Include Vulnerability. CVE-2005-4074 . Webapps exploit for cfm platform
idEDB-ID:26766
last seen2016-02-03
modified2005-12-08
published2005-12-08
reporterr0t
sourcehttps://www.exploit-db.com/download/26766/
titleCF_Nuke 4.6 Index.CFM Local File Include Vulnerability

References