PT-2005-5351 · Punbb · Punbb

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4686

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PunBB version 1.2.9

Description The issue allows attackers to obtain sensitive information due to the inclusion of config.php before calling the unregister globals function.

Recommendations For PunBB version 1.2.9, consider updating to a version where the config.php file is included after the unregister globals function is called, or apply a configuration change to ensure sensitive information is protected.

Correção

Identificadores relacionados

CVE-2005-4686

Produtos afetados

Punbb

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-4686 · Nota de Segurança
• http://secunia.com/advisories/17433 · Aviso do Fabricante
• http://securityfocus.com/bid/15328 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4686 · Nota
• http://punbb.org/changelogs/1.2.9_to_1.2.10.txt · Nota
• http://secunia.com/advisories/17425 · Aviso do Fabricante