Unrated severityNVD Advisory· Published Nov 30, 2005· Updated Jun 16, 2026

CVE-2005-3929

Description

Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xaraya/Xaraya5 versions
cpe:2.3:a:xaraya:xaraya:1.0_rc1:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:xaraya:xaraya:1.0_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:xaraya:xaraya:1.0_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:xaraya:xaraya:1.0_rc3:*:*:*:*:*:*:*
- cpe:2.3:a:xaraya:xaraya:1.0_rc4:*:*:*:*:*:*:*
- (no CPE)range: <=1.0

Patches

Vulnerability mechanics

References

rgod.altervista.org/xaraya1DOS.hmtlnvdExploitVendor Advisory
www.securityfocus.com/bid/15623nvdExploit
secunia.com/advisories/17788nvd
securityreason.com/securityalert/217nvd
www.securityfocus.com/archive/1/418087/100/0/threadednvd
www.securityfocus.com/archive/1/418191/100/0/threadednvd
www.securityfocus.com/archive/1/418209/100/0/threadednvd
www.vupen.com/english/advisories/2005/2665nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.006
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000