Every CVE Search/ Get API key

CVE-2005-2722

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct...

5.0 Medium

CVE-2005-2722 is a medium vulnerability (CVSS 5.0) in Foojan Php Weblog, published August 29, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 68th percentile. No source names a fixed version.

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.

Exploit likelihood

1.19%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.

Record
CVE-2005-2722
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.

Record
CVE-2005-2722
Updated
2026-11-02
EUVDEUVD-2005-2723 No score

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.

Record
EUVD-2005-2723
Updated
2026-11-03
GitHub AdvisoriesGHSA-2wcf-7wvx-2jw3 No score

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct...

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.

Record
GHSA-2wcf-7wvx-2jw3
Updated
2026-11-02

Affected products

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

MoveEnter Open