PT-2005-4762 · Geeklog · Geeklog

R0T3D3Vil · Publicado 2005-12-05 · Atualizado 2018-09-27 · CVE-2005-4026

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Geeklog versions 1.3.x through 1.3.11sr2 Geeklog versions 1.4.x through 1.4.0rc1

Description The issue allows remote attackers to obtain sensitive information via invalid datestart and dateend parameters in the "search.php" file, which leaks the web server path in an error message.

Recommendations For Geeklog versions 1.3.x through 1.3.11sr2, update to version 1.3.11sr3. For Geeklog versions 1.4.x through 1.4.0rc1, update to version 1.4.0rc1 or later.

Correção

Identificadores relacionados

CVE-2005-4026

Produtos afetados

Geeklog

Referências · 5

• http://geeklog.net/article.php/geeklog-1.3.11sr3 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4026 · Nota
• http://pridels0.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4026 · Nota de Segurança
• http://osvdb.org/21398 · Nota