CVE-2005-1445: Sitepanel

Medium severity, CVSS 6.4. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, or (2) read arbitrary files via the lang parameter to index.php.

Affected products

• Sitepanel Sitepanel: up to and including 2.6.1

Published 2005-05-03. Last modified 2026-06-16.