Vulnerability Details CVE-2005-0572
index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.6%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=110935172116369&w=2
- http://neossecurity.net/Advisories/Advisory-05.txt
- http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19480
- http://marc.info/?l=bugtraq&m=110935172116369&w=2
- http://neossecurity.net/Advisories/Advisory-05.txt
- http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19480
Products affected by CVE-2005-0572
-
cpe:2.3:a:phpwebsite:phpwebsite:0.10.0
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.0
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.1
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.2
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.3
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3
-
cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4