PT-2005-2595 · Unknown · Ultimate Php Board

Morinex · Publicado 2005-05-16 · Atualizado 2016-10-18 · CVE-2005-1616

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ultimate PHP Board (UPB) versions 1.8 through 1.9.6

Description The issue allows remote attackers to obtain sensitive information. This is achieved by providing an invalid id or possibly postorder parameter to the viewforum.php file, which reveals the path in an error message when a file cannot be opened.

Recommendations For Ultimate PHP Board (UPB) versions 1.8 through 1.9.6, consider restricting access to the viewforum.php file until a fix is available, or avoid using invalid id or postorder parameters to prevent information disclosure.

Correção

Identificadores relacionados

CVE-2005-1616

Produtos afetados

Ultimate Php Board

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-1616 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111600262424876&w=2 · Nota