CVE-2006-0909

Опубликовано: 28 фев. 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error messages, including (1) PEAR/Text/Diff/Renderer/inline.php, (2) PEAR/Text/Diff/Renderer/unified.php, (3) PEAR/Text/Diff3.php, (4) class_db.php, (5) class_db_mysql.php, and (6) class_xml.php in the ips_kernel/ directory; (7) mysql_admin_queries.php, (8) mysql_extra_queries.php, (9) mysql_queries.php, and (10) mysql_subsm_queries.php in the sources/sql directory; (11) sources/acp_loaders/acp_pages_components.php; (12) sources/action_admin/member.php and (13) sources/action_admin/paysubscriptions.php; (14) login.php, (15) messenger.php, (16) moderate.php, (17) paysubscriptions.php, (18) register.php, (19) search.php, (20) topics.php, (21) and usercp.php in the sources/action_public directory; (22) bbcode/class_bbcode.php, (23) bbcode/class_bbcode_legacy.php, (24) editor/class_editor_rte.php, (25) editor/class_ed

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00751

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-r94f-5vgf-wccc

github

почти 4 года назад