PT-2005-5351 · Punbb · Punbb

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4686

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PunBB version 1.2.9

Description The issue allows attackers to obtain sensitive information due to the inclusion of config.php before calling the unregister globals function.

Recommendations For PunBB version 1.2.9, consider updating to a version where the config.php file is included after the unregister globals function is called, or apply a configuration change to ensure sensitive information is protected.

Fix

Related Identifiers

CVE-2005-4686

Affected Products

Punbb

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-4686 · Security Note
• http://secunia.com/advisories/17433 · Vendor Advisory
• http://securityfocus.com/bid/15328 · Patch
• http://secunia.com/advisories/17425 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4686 · Note
• http://punbb.org/changelogs/1.2.9_to_1.2.10.txt · Note