CVE-2005-2652 - Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) go

CVE-2005-2652

Summary

Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) blacklist.php, (5) zorum/forum.php, (6) globalstat.php, (7) gorum/trace.php, (8) gorum/badwords.php, or (9) gorum/flood.php.

References

http://marc.info/?l=bugtraq&m=112438781604862&w=2
http://rgod.altervista.org/zorum.html
http://securitytracker.com/id?1014725
https://exchange.xforce.ibmcloud.com/vulnerabilities/21914

Vulnerable Configurations

cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*
cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bugtraq	20050818 Zorum 3.5 remote code execution poc exploit
misc	http://rgod.altervista.org/zorum.html
sectrack	1014725
xf	zorum-script-path-disclosure(21914)

Last major update

11-07-2017 - 01:32

Published

23-08-2005 - 04:00

Last modified

11-07-2017 - 01:32