CVE-2005-3680: Xoops

Medium severity, CVSS 6.4. EPSS: 1.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter.

Affected products

• Xoops Xoops: version 2.2.3 only

Published 2005-11-18. Last modified 2026-06-16.