← Vulnerability feed

Vulnerability record · CVE-2005-0880 · published 2 May 2005

CVE-2005-0880: Vortex portal vulnerability

VVortex Portal · Vortex Portal

content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, which leaks the full pathname in a PHP error message.

5.0 CVSS 2.0 Medium EPSS 1.2% · top 33.5%
5.0CVSS 2.0 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, which leaks the full pathname in a PHP error message.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/19811
http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/19811

Track CVE-2005-0880 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2005-0879Vortex portal vulnerabilityPHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code vi…EPSS 8.6%6.8CVE-2007-5842Vortex Portal PHP remote file inclusion in auth scriptsVortex Portal 1.0.42 contains multiple PHP remote file inclusion flaws in admincp/auth/secure.php and admincp/auth/checklogin.php. The cfgProgDir par…EPSS 46%analysed

Source: NIST National Vulnerability Database (record CVE-2005-0880), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.