Unrated severityNVD Advisory· Published Nov 6, 2005· Updated Jun 16, 2026

CVE-2005-3507

Description

Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges via "../" sequences in the template parameter to (1) show_archives.php and (2) show_news.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cutephp/Cutenews2 versions
cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*range: <=1.4.1
- (no CPE)range: = 1.4.1

Patches

Vulnerability mechanics

References

rgod.altervista.org/cute141.htmlnvdExploitVendor Advisory
secunia.com/advisories/17435nvdVendor Advisory
www.osvdb.org/20472nvd
www.osvdb.org/20473nvd
www.osvdb.org/20474nvd
www.securityfocus.com/bid/15295nvd
www.vupen.com/english/advisories/2005/2296nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.010
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000