1. Home
  2. CVE Database
  3. CVE-2005-3017
MEDIUM · 4.3

CVE-2005-3017

PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure...

Vulnerability Description

PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure, SQL error messages, and cross-site scripting (XSS).

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
Content2WebContent2Web1.0.1

References

FAQ

What is CVE-2005-3017?

CVE-2005-3017 is a vulnerability with a CVSS score of 4.3 (MEDIUM). PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure...

How severe is CVE-2005-3017?

CVE-2005-3017 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2005-3017?

Check the references section above for vendor advisories and patch information. Affected products include: Content2Web Content2Web.