{"id": "CVE-2005-3261", "bulletinFamily": "NVD", "title": "CVE-2005-3261", "description": "getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request.", "published": "2005-10-20T06:02:00", "modified": "2016-10-17T23:34:13", "cvss": {"score": 5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-3261", "reporter": "NVD", "references": ["http://www.securityfocus.com/bid/15075", "http://rgod.altervista.org/versatile100RC2.html", "http://marc.info/?l=bugtraq&m=112907535528616&w=2"], "cvelist": ["CVE-2005-3261"], "type": "cve", "lastseen": "2017-04-18T15:51:34", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:versatilebulletinboard:versatilebulletinboard:1.0.0.rc2"], "cvelist": ["CVE-2005-3261"], "cvss": {"score": 5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}, "description": "getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request.", "edition": 1, "hash": "f6c171baf90e3b0bf2e2e8b2b8717ae324155aa8680fa75d2482707eb595f353", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "f859c92c7e029889037ec2bd332192e9", "key": "cpe"}, {"hash": "95c0e5040daab9c9a4988fd1c907a493", "key": "href"}, {"hash": "baecdb7043ae3979c9a275abf8bc688e", "key": "cvelist"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "2b744f7aba3931e37de3af60b4f740a8", "key": "title"}, {"hash": "9e83d6ec37dd30f0988bd9a99692ae07", "key": "published"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "591b21f86140b4e61a2cc391eb85c057", "key": "description"}, {"hash": "48b7ebbd03fd94e2f16bfb7f67b353a4", "key": "modified"}, {"hash": "a75a5f2736926e53ffc043e5d7df13b8", "key": "references"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "a792e2393dff1e200b885c5245988f6f", "key": "cvss"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-3261", "id": "CVE-2005-3261", "lastseen": "2016-09-03T05:53:27", "modified": "2008-09-10T15:46:07", "objectVersion": "1.2", "published": "2005-10-20T06:02:00", "references": ["http://www.securityfocus.com/bid/15075", "http://rgod.altervista.org/versatile100RC2.html", "http://marc.theaimsgroup.com/?l=bugtraq&m=112907535528616&w=2"], "reporter": "NVD", "scanner": [], "title": "CVE-2005-3261", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T05:53:27"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "f859c92c7e029889037ec2bd332192e9"}, {"key": "cvelist", "hash": "baecdb7043ae3979c9a275abf8bc688e"}, {"key": "cvss", "hash": "a792e2393dff1e200b885c5245988f6f"}, {"key": "description", "hash": "591b21f86140b4e61a2cc391eb85c057"}, {"key": "href", "hash": "95c0e5040daab9c9a4988fd1c907a493"}, {"key": "modified", "hash": "e46a85a735573ceec5359d8da4243f8a"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "9e83d6ec37dd30f0988bd9a99692ae07"}, {"key": "references", "hash": "8ded7901cb9c73fe51eb423ce8dfba24"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "2b744f7aba3931e37de3af60b4f740a8"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "989a75eac46ed6ff7bdeef18763b9f4070dc279302b8b9c28c139bae1ca29b63", "viewCount": 0, "objectVersion": "1.2", "cpe": ["cpe:/a:versatilebulletinboard:versatilebulletinboard:1.0.0.rc2"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": [], "enchantments": {"vulnersScore": 6.4}}

{"result": {"osvdb": [{"id": "OSVDB:19973", "type": "osvdb", "title": "versatileBulletinBoard (vBB) getversions.php Information Disclosure", "description": "## Vulnerability Description\nversatileBulletinBoard (vBB) contains a flaw that may lead to an unauthorized information disclosure. \u00a0The issue is triggered when a remote attacker calls the getversions.php script, which will disclose detailed file and version information resulting in a loss of confidentiality.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nversatileBulletinBoard (vBB) contains a flaw that may lead to an unauthorized information disclosure. \u00a0The issue is triggered when a remote attacker calls the getversions.php script, which will disclose detailed file and version information resulting in a loss of confidentiality.\n## Manual Testing Notes\nhttp://[target]/[path]/getversions.php\n## References:\nVendor URL: http://vbb.eniki.de/\n[Secunia Advisory ID:17174](https://secuniaresearch.flexerasoftware.com/advisories/17174/)\n[Related OSVDB ID: 19966](https://vulners.com/osvdb/OSVDB:19966)\n[Related OSVDB ID: 19962](https://vulners.com/osvdb/OSVDB:19962)\n[Related OSVDB ID: 19963](https://vulners.com/osvdb/OSVDB:19963)\n[Related OSVDB ID: 19964](https://vulners.com/osvdb/OSVDB:19964)\n[Related OSVDB ID: 19967](https://vulners.com/osvdb/OSVDB:19967)\n[Related OSVDB ID: 19972](https://vulners.com/osvdb/OSVDB:19972)\n[Related OSVDB ID: 19969](https://vulners.com/osvdb/OSVDB:19969)\n[Related OSVDB ID: 19970](https://vulners.com/osvdb/OSVDB:19970)\n[Related OSVDB ID: 19965](https://vulners.com/osvdb/OSVDB:19965)\n[Related OSVDB ID: 19968](https://vulners.com/osvdb/OSVDB:19968)\n[Related OSVDB ID: 19971](https://vulners.com/osvdb/OSVDB:19971)\nOther Advisory URL: http://rgod.altervista.org/versatile100RC2.html\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-10/0120.html\n[CVE-2005-3261](https://vulners.com/cve/CVE-2005-3261)\nBugtraq ID: 15075\n", "published": "2005-10-10T08:19:48", "cvss": {"score": 5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}, "href": "https://vulners.com/osvdb/OSVDB:19973", "cvelist": ["CVE-2005-3261"], "lastseen": "2017-04-28T13:20:16"}]}}