PT-2005-1676 · Pblang · Pblang

Th3_R@V3N · Published 2005-03-01 · Updated 2017-07-11 · CVE-2005-0631

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PBLang version 4.63

Description The issue allows remote authenticated users to delete arbitrary PM files. This is achieved by modifying the id and a parameters in the delpm.php file.

Recommendations For PBLang version 4.63, consider restricting access to the delpm.php file until a patch is available, and avoid using the id and a parameters in this file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-0631

Affected Products

Pblang

References · 5

• 🔥 http://securityfocus.com/bid/12694 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0631 · Security Note
• http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19552 · Note
• http://marc.info/?l=bugtraq&m=110970738214608&w=2 · Note