PT-2005-4309 · Vubb · Vubb

Trueend5 · Published 2005-11-06 · Updated 2024-02-14 · CVE-2005-3513

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VUBB alpha rc1

Description The issue allows remote attackers to obtain the installation path of the application. This can be achieved by using the viewforum action with the f parameter set to a single quote (').

Recommendations For VUBB alpha rc1, as a temporary workaround, consider restricting access to the viewforum action or validating and sanitizing the f parameter to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3513

Affected Products

Vubb

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-3513 · Security Note
• http://marc.info/?l=bugtraq&m=113087965608496&w=2 · Note
• http://irannetjob.com/content/view/152/28 · Note