PT-2005-4309 · Vubb · Vubb

·

CVE-2005-3513

·

Publicado

2005-11-06

·

Atualizado

2024-02-14

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions VUBB alpha rc1
Description The issue allows remote attackers to obtain the installation path of the application. This can be achieved by using the viewforum action with the f parameter set to a single quote (').
Recommendations For VUBB alpha rc1, as a temporary workaround, consider restricting access to the viewforum action or validating and sanitizing the f parameter to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2005-3513

Produtos afetados

Vubb