Vulnerability Details CVE-2005-1699
Directory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to read arbitrary files via a .. (dot dot) in the skin parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.9%
CVSS Severity
CVSS v2 Score 4.0
References
Products affected by CVE-2005-1699
-
cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3