PT-2005-5059 · Intermesh · Adaptive Website Framework

Published 2005-12-20 · Updated 2008-09-20 · CVE-2005-4373

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adaptive Website Framework (AWF) versions 2.10 and earlier

Description The issue allows remote attackers to obtain the full path of the application via an invalid mode parameter to "community.html", which leaks the path in an error message.

Recommendations For versions 2.10 and earlier, consider restricting access to the "community.html" endpoint until a fix is available, and avoid using invalid parameters to prevent path leakage.

Fix

Related Identifiers

CVE-2005-4373

Affected Products

Adaptive Website Framework

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4373 · Security Note
• http://osvdb.org/21915 · Note
• http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html · Note
• http://awf-cms.org/news.html · Note