CVE-2005-2892: Pblang

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) in the u parameter.

Affected products

• Pblang Pblang: version 4.65 only

Published 2005-09-14. Last modified 2026-06-16.