CVE-2005-3551

Опубликовано: 16 нояб. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file.

Ссылки

http://secunia.com/advisories/17471
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/415975/30/0/threaded
http://www.vupen.com/english/advisories/2005/2343
http://secunia.com/advisories/17471
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/415975/30/0/threaded
http://www.vupen.com/english/advisories/2005/2343

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*

Версия до 0.6.1 (включая)

EPSS

Процентиль: 57%

0.00346

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-hmfg-9r4f-mgph

github

почти 4 года назад