CVE-2005-2007
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to...
CVE-2005-2007 is a medium vulnerability (CVSS 6.4) in Edgewall Software Trac, published June 19, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.79%, the 78th percentile. Fixed in trac 0.8.4-1.
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
- Record
CVE-2005-2007- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
- Record
CVE-2005-2007- Updated
- 2026-11-02
EUVDEUVD-2005-2009 No score
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
- Record
EUVD-2005-2009- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p2r2-593v-fg6q No score
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to...
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
- Record
GHSA-p2r2-593v-fg6q- Updated
- 2026-11-02
OSV No score
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
- Record
CVE-2005-2007- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2007 No score
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
- Record
DEBIAN-CVE-2005-2007- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
hardened-php.net/advisory-012005.php
lists.grok.org.uk/pipermail/full-disclosure/2005-June/034618.html
secunia.com/advisories/15752
svn.edgewall.com/repos/trac/tags/trac-0.8.4/ChangeLog
nvd.nist.gov/vuln/detail/CVE-2005-2007
github.com/advisories/GHSA-p2r2-593v-fg6q
security-tracker.debian.org/tracker/CVE-2005-2007