PT-2005-2921 · Interactivephp · Interactivephp Fusionbb

Publicado 2005-06-14 · Atualizado 2008-09-05 · CVE-2005-1971

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions InteractivePHP FusionBB versions .11 Beta and earlier

Description A directory traversal issue allows remote attackers to include arbitrary local files by using ".." sequences in the language parameter.

Recommendations For InteractivePHP FusionBB versions .11 Beta and earlier, consider restricting access to the language parameter to prevent exploitation until a fix is available.

Correção

Identificadores relacionados

CVE-2005-1971

Produtos afetados

Interactivephp Fusionbb

Referências · 4

• http://interactivephp.com/misc/CHANGELOG.html · Nota
• http://gulftech.org/?node=research&article_id=00081-06132005 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1971 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1971 · Nota