PT-2005-1520 · Mercury · Mercuryboard

Lostmon · Published 2005-02-17 · Updated 2008-09-05 · CVE-2005-0460

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MercuryBoard versions 1.0.x through 1.1.x

Description The issue allows remote attackers to obtain sensitive information. This is achieved by setting the debug parameter in the "index.php" file.

Recommendations For MercuryBoard versions 1.0.x through 1.1.x, consider disabling the debug parameter in the "index.php" file to prevent sensitive information disclosure.

Exploit

Fix

Related Identifiers

CVE-2005-0460

Affected Products

Mercuryboard

References · 4

• 🔥 http://osvdb.org/13787 · Exploit
• 🔥 http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html · Exploit
• http://secunia.com/advisories/14284 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0460 · Security Note