PT-2005-4816 · Phpbb · Phpbb Extreme Styles

Publicado 2005-12-08 · Atualizado 2018-10-19 · CVE-2005-4084

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpBB eXtreme Styles module versions 2.2.1 and earlier

Description The issue allows remote attackers to obtain the installation path of the application. This is achieved by exploiting the xs edit.php file in the phpBB eXtreme Styles module through an invalid viewbackup parameter.

Recommendations For versions 2.2.1 and earlier, consider restricting access to the xs edit.php file until a patch is available. As a temporary workaround, avoid using the viewbackup parameter in the xs edit.php file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4084

Produtos afetados

Phpbb Extreme Styles

Referências · 2

• http://securityfocus.com/archive/1/418518/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4084 · Nota de Segurança