CVE-2005-2147

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the 1 upload or 2 attachment viewer scripts...

FreeBSD Ports: trac

The remote host is missing an update to the system as announced in the referenced advisory. VID b02c1d80-e1bb-11d9-b875-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2005-2147

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the 1 upload or 2 attachment viewer scripts...

CVE-2005-2147

CVE-2005-2147 concerns Trac prior to 0.8.4. Multiple connected sources confirm a flaw where an attacker can read or upload arbitrary files by supplying a full pathname in the id parameter to the upload or attachment viewer scripts. The vulnerability enables remote access to files and, in some con...