← Vulnerability feed

Vulnerability record · CVE-2005-0479 · published 30 March 2005

CVE-2005-0479: Trackercam vulnerability

Trackercam · Trackercam

Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and (1) "/" slash), (2) "\" (backslash), or (3) hex-encoded characters in the fn parameter.

5.0 CVSS 2.0 Medium EPSS 3.1% · top 12.6%
5.0CVSS 2.0 base score
3.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and (1) "/" slash), (2) "\" (backslash), or (3) hex-encoded characters in the fn parameter.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/archive/1/390918 ExploitVendor Advisory
http://www.securityfocus.com/bid/12592 ExploitVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19414
http://www.securityfocus.com/archive/1/390918 ExploitVendor Advisory
http://www.securityfocus.com/bid/12592 ExploitVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19414

Track CVE-2005-0479 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.0CVE-2005-0478TrackerCam buffer overflows via User-Agent header and PHP script argumentsTrackerCam 5.12 and earlier contain multiple buffer overflows reachable through HTTP requests, specifically a long User-Agent header and a long argum…EPSS 66%analysed5.0CVE-2005-0481Trackercam vulnerabilityTrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script.EPSS 1.5%5.0CVE-2005-0482Trackercam vulnerabilityTrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of connections with a negative Conten…EPSS 1.7%4.3CVE-2005-0480Trackercam vulnerabilityCross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via the login …EPSS 1.2%

Source: NIST National Vulnerability Database (record CVE-2005-0479), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.