PT-2005-3883 · Phpmyfaq · Phpmyfaq

Retrogod · Published 2005-09-23 · Updated 2017-07-11 · CVE-2005-3049

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PhpMyFaq version 1.5.1

Description The issue allows remote attackers to obtain sensitive information due to insufficient access control and predictable filenames of data files stored under the web document root. This can be achieved via a direct request to the "data/tracking[DATE]" file.

Recommendations For PhpMyFaq version 1.5.1, consider restricting access to the data directory to minimize the risk of exploitation. As a temporary workaround, limit access to the tracking files until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-2005-3049

Affected Products

Phpmyfaq

References · 9

• 🔥 http://rgod.altervista.org/phpmyfuck151.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3049 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3049 · Note
• http://securitytracker.com/id?1014968 · Note
• http://osvdb.org/19670 · Note
• http://securityfocus.com/bid/14930 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22405 · Note
• http://marc.info/?l=bugtraq&m=112749230124091&w=2 · Note
• http://secunia.com/advisories/16933 · Note