CVE-2005-3557

2005-11-16T07:42:00
ID CVE-2005-3557
Type cve
Reporter cve@mitre.org
Modified 2018-10-19T15:37:00

Description

Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) in the selected%5B%5D parameter in an HTTP POST request.