PT-2005-3883 · Phpmyfaq · Phpmyfaq

Retrogod · Publicado 2005-09-23 · Atualizado 2017-07-11 · CVE-2005-3049

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PhpMyFaq version 1.5.1

Description The issue allows remote attackers to obtain sensitive information due to insufficient access control and predictable filenames of data files stored under the web document root. This can be achieved via a direct request to the "data/tracking[DATE]" file.

Recommendations For PhpMyFaq version 1.5.1, consider restricting access to the data directory to minimize the risk of exploitation. As a temporary workaround, limit access to the tracking files until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2005-3049

Produtos afetados

Phpmyfaq

Referências · 9

• 🔥 http://rgod.altervista.org/phpmyfuck151.html · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3049 · Nota
• http://securitytracker.com/id?1014968 · Nota
• http://osvdb.org/19670 · Nota
• http://securityfocus.com/bid/14930 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22405 · Nota
• http://marc.info/?l=bugtraq&m=112749230124091&w=2 · Nota
• http://secunia.com/advisories/16933 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3049 · Nota de Segurança