PT-2005-2506 · Pwsphp · Pwsphp

Froggz · Publicado 2005-05-11 · Atualizado 2016-10-18 · CVE-2005-1510

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PwsPHP version 1.2.2

Description The issue allows remote attackers to obtain sensitive information via a direct request to the admin directory. This is possible because the admin directory reveals the path in an error message when accessed directly.

Recommendations For PwsPHP version 1.2.2, consider restricting access to the admin directory to prevent information disclosure until a patch is available.

Correção

Identificadores relacionados

CVE-2005-1510

Produtos afetados

Pwsphp

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-1510 · Nota de Segurança
• http://osvdb.org/16234 · Nota
• http://marc.info/?l=bugtraq&m=111565808024581&w=2 · Nota
• http://secunia.com/advisories/15315 · Nota