CVE Kennung:	CAN-2005-2792
Beschreibung:	Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.
Test Kennungen:	Nicht verfügbar
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2792 BugTraq ID: 14695 http://www.securityfocus.com/bid/14695 Bugtraq: 20050829 phpLDAPadmin 0.9.6 - 0.9.7/alpha5 (possibly prior versions) (Google Search) http://marc.info/?l=bugtraq&m=112542447219235&w=2 http://www.rgod.altervista.org/phpldap.html http://secunia.com/advisories/16617/ XForce ISS Database: phpldapadmin-welcome-file-include(22103) https://exchange.xforce.ibmcloud.com/vulnerabilities/22103