Skip to content

CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote...

5.0 MediumPublic exploitFix available

CVE-2005-2792 is a medium vulnerability (CVSS 5.0) in Phpldapadmin Project Phpldapadmin, published September 2, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.7%, the 96th percentile. Fixed in phpldapadmin 0.9.6c-7.

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.

Exploit likelihood

11.7%Up 7.2 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.

Record: CVE-2005-2792
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.

Record: CVE-2005-2792
Updated: 2026-11-02

EUVDEUVD-2005-2793 No score

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.

Record: EUVD-2005-2793
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rw8c-ph3p-pggf No score

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote...

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.

Record: GHSA-rw8c-ph3p-pggf
Weakness: CWE-22
Updated: 2026-11-02

OSV No score

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.

Record: CVE-2005-2792
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-2792 No score

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.

Record: DEBIAN-CVE-2005-2792
Updated: 2026-11-02

Affected products

phpldapadmin project phpldapadmin

Affected packages

Affected packages
Package	Affected	Fixed
`phpldapadmin` Debian:12	before 0.9.6c-7	0.9.6c-7
`phpldapadmin` Debian:13	before 0.9.6c-7	0.9.6c-7
`phpldapadmin` Debian:14	before 0.9.6c-7	0.9.6c-7

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	phpLDAPadmin 0.9.6/0.9.7 - 'welcome.php' Arbitrary File Inclusion	2005-08-30

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References