Vulnerability Database

313,663

Total vulnerabilities in the database

CVE-2005-3592

index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the application by triggering an error message, such as by entering multiple ../ (dot dot slash) in the archive parameter.

  • Published: Nov 16, 2005
  • Updated: Nov 9, 2025
  • CVE: CVE-2005-3592
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
cutephp / cutenews - 1.4.0.x