CVE-2005-2609: Vegadns

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path via an invalid VDNS_Sessid parameter.

Affected products

• Vegadns Vegadns: version 0.8.1 only; version 0.9.8 only

Published 2005-08-17. Last modified 2026-06-16.