CVE-2005-2256: Phppgadmin

Medium severity, CVSS 5.0. EPSS: 4.6% chance of exploitation in the next 30 days.

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.

Affected products

• Phppgadmin Phppgadmin: version 3.1 only; version 3.2 only; version 3.3 only; version 3.4 only; version 3.4.1 only; version 3.5.3 only

Published 2005-07-13. Last modified 2026-06-16.