PT-2005-4313 · Chipmunk Scripts · Chipmunk Scripts Guestbook

Trueend5 · Publicado 2005-11-06 · Atualizado 2024-02-14 · CVE-2005-3517

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chipmunk Scripts Guestbook (affected versions not specified)

Description The issue allows remote attackers to obtain the installation path of the script by causing an error message to be displayed. This can be achieved through a URL that contains a single quote (') in the start parameter of "index.php".

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-3517

Produtos afetados

Chipmunk Scripts Guestbook

Referências · 6

• http://securityreason.com/securityalert/96 · Nota
• http://irannetjob.com/content/view/148/28 · Nota
• http://osvdb.org/20170 · Nota
• http://marc.info/?l=bugtraq&m=112982490104274&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3517 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22825 · Nota