{"id":"CVE-2005-1306","aliases":["EUVD-2005-1309","GHSA-jrv6-p293-phjx"],"status":"published","title":"The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to...","description":"The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the \"XML External Entity vulnerability.\"","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.14528,"percentile":0.96661,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-611"],"published":"2005-06-15T04:00:00Z","modified":"2026-06-16T22:12:48Z","exploits":[{"source":"exploitdb","id":"EDB-25822","title":"Adobe Acrobat 7.0 / Adobe Reader 7.0 - File Existence / File Disclosure","type":"remote","platform":"windows","date":"2005-06-15","verified":true,"url":"https://www.exploit-db.com/exploits/25822"}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat_reader"}],"references":[{"url":"http://www.securityfocus.com/bid/13962","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.adobe.com/support/techdocs/331710.html","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1306"},{"url":"https://github.com/advisories/GHSA-jrv6-p293-phjx"}],"sources":{"cve":[{"id":"CVE-2005-1306","description":"The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the \"XML External Entity vulnerability.\"","status":"published","published":"2005-06-15T04:00:00Z","modified":"2024-08-07T21:44:06.17Z","updated_at":"2026-11-02T14:33:39.586409Z"}],"euvd":[{"id":"EUVD-2005-1309","description":"The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the \"XML External Entity vulnerability.\"","status":"published","published":"2005-06-15T04:00:00Z","modified":"2024-08-07T21:44:06Z","updated_at":"2026-11-03T01:15:34.497775Z"}],"ghsa":[{"id":"GHSA-jrv6-p293-phjx","title":"The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to...","description":"The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the \"XML External Entity vulnerability.\"","status":"published","published":"2022-05-01T01:57:13Z","modified":"2026-03-14T05:05:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T15:06:36.943588Z"}],"nvd":[{"id":"CVE-2005-1306","description":"The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the \"XML External Entity vulnerability.\"","status":"published","published":"2005-06-15T04:00:00Z","modified":"2026-06-16T22:12:48.993Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:00:55.600202Z"}]}}