ID |
CVE-2005-2565
|
Summary |
Gravity Board X (GBX) 1.1 allows remote attackers to obtain sensitive information via (1) a 1 in the perm parameter to deletethread.php or a direct request to (2) ban.php, (3) addnews.php, (4) banned.php, (5) boardstats.php, (6) adminform.php, (7) /forms/admininfo.php, (8) /forms/announcements.php, (9) forms/banform.php, or (10) other pages in the /forms directory, which reveal the path in an error message. |
References |
|
Vulnerable Configurations |
|
CVSS |
Base: | 5.0 (as of 11-07-2017 - 01:32) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-Other |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
PARTIAL |
NONE |
NONE |
|
cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
refmap
via4
|
bugtraq | 20050807 Gravity Board X v1.1 multiple vulnerabilities | xf | gravityboardx-multiple-path-disclosure(21746) |
|
Last major update |
11-07-2017 - 01:32 |
Published |
16-08-2005 - 04:00 |
Last modified |
11-07-2017 - 01:32 |