CVE-2005-0411: Citrusdb

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter.

Affected products

• Citrusdb Citrusdb: up to and including 0.3.6

Published 2005-02-14. Last modified 2026-06-16.