CVE-2005-4074

MEDIUM 5.0CVE-2005-4074 · Published 08/12/2005 · updated 16/06/2026

In short

CVE-2005-4074 is a MEDIUM (CVSS 5.0) vulnerability affecting cf nuke (mycfnuke).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cf nuke mycfnuke	`= 4.6`	No fix yet

Description

Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to include arbitrary local .cfm files via a .. (dot dot) in the (1) sector or (2) page parameters.

References

pridels0.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html
secunia.com/advisories/17939 · Vendor Advisory
osvdb.org/21505
securityfocus.com/bid/15777
vupen.com/english/advisories/2005/2795
exchange.xforce.ibmcloud.com/vulnerabilities/23539

More vulnerabilities in cf nuke

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free