CVE-2005-0801: Includer.cgi

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.

Affected products

• Includer.cgi Includer.cgi: any version

Published 2005-05-02. Last modified 2026-06-16.