PT-2005-4313 · Chipmunk Scripts · Chipmunk Scripts Guestbook

Trueend5 · Published 2005-11-06 · Updated 2024-02-14 · CVE-2005-3517

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chipmunk Scripts Guestbook (affected versions not specified)

Description The issue allows remote attackers to obtain the installation path of the script by causing an error message to be displayed. This can be achieved through a URL that contains a single quote (') in the start parameter of "index.php".

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3517

Affected Products

Chipmunk Scripts Guestbook

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-3517 · Security Note
• http://securityreason.com/securityalert/96 · Note
• http://irannetjob.com/content/view/148/28 · Note
• http://osvdb.org/20170 · Note
• http://marc.info/?l=bugtraq&m=112982490104274&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22825 · Note