Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2005-2255

Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to (1) index.php or (2) admin/index.php.

  • Published: Jul 13, 2005
  • Updated: Nov 9, 2025
  • CVE: CVE-2005-2255
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:P/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
gianluca_baldo / phpauction 2.5 2.5.x