Unrated severityNVD Advisory· Published Jul 6, 2005· Updated Jun 16, 2026
CVE-2005-2147
CVE-2005-2147
Description
Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- secunia.com/advisories/15752nvdPatchVendor Advisory
- www.hardened-php.net/advisory-012005.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/13990nvdPatch
- www.debian.org/security/2005/dsa-739nvd
News mentions
0No linked articles in our index yet.