CVE-2005-2436

CVE-2005-2436

EPSS 1.4%

browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not exist in the dir parameter or (2) a direct request to certain php files, which reveal the path in an error message.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://marc.info/?l=bugtraq&m=112260471228762&w=2 http://secunia.com/advisories/16263 https://exchange.xforce.ibmcloud.com/vulnerabilities/21633 http://www.osvdb.org/18343 http://www.osvdb.org/18344