CVE-2005-2951

HIGH · CVSS 7.5 EPSS 3.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-09-16 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2005-2951

Severity

HIGH

CVSS

7.5

EPSS

3.09%

Original Filing — NVD Description

Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" (trailing null byte) characters in the l parameter, which is used in an include_once statement.