PT-2005-2979 · Cool Cafe · Cool Cafe Chat

Donnie Werner + 1 · Published 2005-06-16 · Updated 2020-02-10 · CVE-2005-2036

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cool Cafe Chat version 1.2.1

Description The issue allows remote attackers to obtain sensitive information, including the administrator password and email address, by modifying the nickname value in the modifyUser.asp file.

Recommendations For Cool Cafe Chat version 1.2.1, consider restricting access to the modifyUser.asp file until a patch is available, and avoid using the nickname value in the affected file to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2005-2036

Affected Products

Cool Cafe Chat

References · 4

• 🔥 http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt · Exploit
• 🔥 http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2036 · Security Note
• http://osvdb.org/17350 · Note