CVE-2005-4039
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows...
CVE-2005-4039 is a high vulnerability (CVSS 7.8) in Web4future Portal Solutions, published December 6, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.69%, the 89th percentile. No source names a fixed version.
- Severity
- 7.8 HighCVSS 2.0, NVD
- Exploit chance
- 3.69%EPSS, 89th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Web4Future Portal Solutions - 'Arhiva.php' Directory Traversal | 2005-12-05 |
What each source reports
NVD Score used
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.
- Record
CVE-2005-4039- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.
- Record
CVE-2005-4039- Updated
- 2026-11-02
EUVDEUVD-2005-4034No score
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.
- Record
EUVD-2005-4034- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6x24-hm2g-9f7xNo score
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows...
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.
- Record
GHSA-6x24-hm2g-9f7x- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/23421
vupen.com/english/advisories/2005/2733
securityfocus.com/bid/15718
osvdb.org/21423
pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html
secunia.com/advisories/17880
nvd.nist.gov/vuln/detail/CVE-2005-4039
github.com/advisories/GHSA-6x24-hm2g-9f7x