CVE-2004-2255

CVE-2004-2255 describes a directory traversal vulnerability in phpMyFAQ version 1.3.12. This flaw allows remote attackers to read arbitrary files and potentially execute local PHP files by manipulating the 'action' variable, which is used in constructing template filenames. The vulnerability has a CVSS score of 6.4, indicating a medium severity, with a low attack complexity and no authentication required, potentially leading to partial confidentiality and integrity impacts. There is no evidence of active exploitation, publicly available exploit code in common repositories like Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this CVE.