CVE-2005-2147

no score yetEPSS 1.4%

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
Published: 2005-07-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

edgewall_software:trac

References

http://secunia.com/advisories/15752
http://www.debian.org/security/2005/dsa-739
http://www.hardened-php.net/advisory-012005.php
http://www.securityfocus.com/bid/13990
http://secunia.com/advisories/15752

Check your stack JSON