PT-2005-1520 · Mercury · Mercuryboard

Lostmon · Publicado 2005-02-17 · Atualizado 2008-09-05 · CVE-2005-0460

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MercuryBoard versions 1.0.x through 1.1.x

Description The issue allows remote attackers to obtain sensitive information. This is achieved by setting the debug parameter in the "index.php" file.

Recommendations For MercuryBoard versions 1.0.x through 1.1.x, consider disabling the debug parameter in the "index.php" file to prevent sensitive information disclosure.

Exploit

Correção

Identificadores relacionados

CVE-2005-0460

Produtos afetados

Mercuryboard

Referências · 4

• 🔥 http://osvdb.org/13787 · Exploit
• 🔥 http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html · Exploit
• http://secunia.com/advisories/14284 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0460 · Nota de Segurança