Vulnerability Details CVE-2005-1235
auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/15029
- http://securitytracker.com/id?1013779
- http://www.osvdb.org/15706
- http://www.phpbb-auction.com/sutra5600.html
- http://www.snkenjoi.com/secadv/secadv9.txt
- http://secunia.com/advisories/15029
- http://securitytracker.com/id?1013779
- http://www.osvdb.org/15706
- http://www.phpbb-auction.com/sutra5600.html
- http://www.snkenjoi.com/secadv/secadv9.txt
Products affected by CVE-2005-1235
-
cpe:2.3:a:phpbb_group:phpbb-auction:1.0m
-
cpe:2.3:a:phpbb_group:phpbb-auction:1.2m