VULNERABILITY INTELLIGENCE

CVE-2004-2255

CVSS score6.4 MEDIUM

EPSS probability1.98%

CISA KEVNot currently listed

Published2004-12-31

Last modified2026-06-16

Description

Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.