CVE-2004-2256

CVE-2004-2256 describes a directory traversal vulnerability in phpMyFAQ version 1.4.0 alpha. This flaw allows remote attackers to read arbitrary files and potentially execute local PHP files by manipulating the 'lang' variable with directory traversal sequences. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity and no authentication required, leading to potential information disclosure. There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage surrounding this CVE.