Vulnerability in Vegadns

CVE-2005-2609

index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path via an invalid VDNS_Sessid parameter.

EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.

Affected products

Vegadns — versions 0.8.1, 0.9.8
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)