Vulnerability in Pblang

CVE-2005-0630

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.

EPSS: 0.017 (75.0th percentile) — read the EPSS interpretation.

Affected products

  • Pblang — versions 4.0, 4.6, 4.56_4.5_rc2
  • N/a — versions n/a

References