CVE-2005-3948
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote...
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
- Record
CVE-2005-3948- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
- Record
CVE-2005-3948- Updated
- 2026-11-02
EUVDEUVD-2005-3943 No score
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
- Record
EUVD-2005-3943- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3876-89hf-c4pw No score
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote...
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
- Record
GHSA-3876-89hf-c4pw- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities | 2011-10-29 |
| Exploit-DB | PHP Photo Album 0.2.3/4.1 - Local File Inclusion | 2005-11-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3948 is a medium vulnerability (CVSS 5.0) in Phpalbum.net Phpalbum, published December 1, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.54%, the 89th percentile. No source names a fixed version.
