Логотип exploitDog
bind:CVE-2005-4856
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2005-4856

Количество 4

Количество 4

ubuntu логотип

CVE-2005-4856

больше 19 лет назад

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url".

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2005-4856

больше 19 лет назад

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url".

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2005-4856

больше 19 лет назад

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, ...

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-9qj7-c8cr-rw2h

больше 3 лет назад

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url".

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2005-4856

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url".

CVSS2: 5
0%
Низкий
больше 19 лет назад
nvd логотип
CVE-2005-4856

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url".

CVSS2: 5
0%
Низкий
больше 19 лет назад
debian логотип
CVE-2005-4856

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, ...

CVSS2: 5
0%
Низкий
больше 19 лет назад
github логотип
GHSA-9qj7-c8cr-rw2h

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url".

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу