VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 14, 2005· Updated Jun 16, 2026

CVE-2005-0411

CVE-2005-0411

Description

Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Citrusdb/Citrusdb2 versions
    cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:citrusdb:citrusdb:*:*:*:*:*:*:*:*range: <=0.3.6
    • (no CPE)range: <=0.3.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.