CVE-2005-3789

CVE-2005-3789 describes multiple directory traversal vulnerabilities in phpwcms version 1.2.5. Specifically, remote attackers can read arbitrary files by injecting ".." sequences into the form_lang parameter in login.php and the imgdir parameter in random_image.php. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for unauthorized information disclosure with low attack complexity and no authentication required. While there is no evidence of active exploitation or Metasploit modules, exploit code is publicly available on ExploitDB, though community discussion and media coverage are minimal.