CVE-2005-1586

Опубликовано: 14 мая 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to (1) db/users.txt, (2) db/banList.txt, (3) db/censureWords.txt, or (4) backup files.

Ссылки

http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html
Vendor Advisory
http://secunia.com/advisories/15200
Vendor Advisory
http://www.osvdb.org/16328
Vendor Advisory
http://www.osvdb.org/16329
Vendor Advisory
http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html
Vendor Advisory
http://secunia.com/advisories/15200
Vendor Advisory
http://www.osvdb.org/16328
Vendor Advisory
http://www.osvdb.org/16329
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:open_solution:quick.forum:2.1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00457

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9wmw-pgq3-fwf5

github

почти 4 года назад