PT-2005-1965 · Ublog · Ublog Reload

3Nitro · Published 2005-03-30 · Updated 2016-10-18 · CVE-2005-0938

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ublog Reload versions 1.0 through 1.0.4

Description The issue allows remote attackers to read usernames and hashed passwords by making a direct request to the ublogreload.mdb file, which is stored under the web root.

Recommendations For versions 1.0 through 1.0.4, consider restricting access to the ublogreload.mdb file to prevent unauthorized reading of sensitive data.

Fix

Related Identifiers

CVE-2005-0938

Affected Products

Ublog Reload

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-0938 · Security Note
• http://secunia.com/advisories/14725 · Note
• http://securitytracker.com/id?1013603 · Note
• http://persianhacker.net/news/news-2945.html · Note
• http://marc.info/?l=bugtraq&m=111214393101387&w=2 · Note