PT-2005-2506 · Pwsphp · Pwsphp

Froggz · Published 2005-05-11 · Updated 2016-10-18 · CVE-2005-1510

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PwsPHP version 1.2.2

Description The issue allows remote attackers to obtain sensitive information via a direct request to the admin directory. This is possible because the admin directory reveals the path in an error message when accessed directly.

Recommendations For PwsPHP version 1.2.2, consider restricting access to the admin directory to prevent information disclosure until a patch is available.

Fix

Related Identifiers

CVE-2005-1510

Affected Products

Pwsphp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-1510 · Security Note
• http://osvdb.org/16234 · Note
• http://marc.info/?l=bugtraq&m=111565808024581&w=2 · Note
• http://secunia.com/advisories/15315 · Note