PT-2002-2988 · Unknown · Ultimate Php Board
Publicado
2002-12-31
·
Atualizado
2017-07-29
·
CVE-2002-2276
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Ultimate PHP Board (UPB) version 1.0
Description:
The issue allows remote attackers to view the physical path of the message board. This is achieved via a direct request to the "add.php" endpoint, which leaks the path in an error message.
Recommendations:
For Ultimate PHP Board (UPB) version 1.0, consider modifying the error handling in the "add.php" script to prevent the disclosure of sensitive path information. As a temporary workaround, restrict access to the "add.php" endpoint to minimize the risk of exploitation.
Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ultimate Php Board