PT-2005-2921 · Interactivephp · Interactivephp Fusionbb

Published 2005-06-14 · Updated 2008-09-05 · CVE-2005-1971

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions InteractivePHP FusionBB versions .11 Beta and earlier

Description A directory traversal issue allows remote attackers to include arbitrary local files by using ".." sequences in the language parameter.

Recommendations For InteractivePHP FusionBB versions .11 Beta and earlier, consider restricting access to the language parameter to prevent exploitation until a fix is available.

Fix

Related Identifiers

CVE-2005-1971

Affected Products

Interactivephp Fusionbb

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-1971 · Security Note
• http://interactivephp.com/misc/CHANGELOG.html · Note
• http://gulftech.org/?node=research&article_id=00081-06132005 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1971 · Note