CVE-2005-2256
phppgadmin 3.1-3.5.3 - Directory Traversal via Encoded Dot-Dot Sequences in formLanguage Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-2256. PoCs published by [email protected].
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in phpPgAdmin by manipulating the 'formLanguage' parameter to access arbitrary files (e.g., /etc/passwd). The payload uses URL-encoded traversal sequences to bypass input validation.
Description
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in phpPgAdmin by manipulating the 'formLanguage' parameter to access arbitrary files (e.g., /etc/passwd). The payload uses URL-encoded traversal sequences to bypass input validation.