CVE-2004-1505: Salims Softhouse Jaf CMS

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter.

Affected products

• Salims Softhouse Jaf CMS: version 3.0 only

Published 2004-12-31. Last modified 2026-06-16.