CVE-2005-4686

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregister_globals function, which allows attackers to obtain unspecified sensitive information.

Ссылки

http://secunia.com/advisories/17425
Patch
Vendor Advisory
http://secunia.com/advisories/17433
Patch
Vendor Advisory
http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
http://www.securityfocus.com/bid/15328
Patch
http://secunia.com/advisories/17425
Patch
Vendor Advisory
http://secunia.com/advisories/17433
Patch
Vendor Advisory
http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
http://www.securityfocus.com/bid/15328
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00365

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g6c8-gjr8-q3fr

github

почти 4 года назад