Lucene search
HistoryMay 16, 2005 - 4:00 a.m.
CVE-2005-1616
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.7%
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly (2) postorder parameter, which reveals the path in an error message when a file can not be opened.
Affected configurations
Node
ultimate_php_boardultimate_php_boardMatch1.8
ORultimate_php_boardultimate_php_boardMatch1.8.2
ORultimate_php_boardultimate_php_boardMatch1.9
ORultimate_php_boardultimate_php_boardMatch1.9.6
Related
cve
cve
CVE-2005-1616
2005-05-16 04:00:00
cvelist
cvelist
CVE-2005-1616
2005-05-16 04:00:00
openvas
openvas
Ultimate PHP Board < 1.9.7 Multiple Vulnerabilities
2005-11-03 00:00:00
nessus
nessus
Ultimate PHP Board < 1.9.7 viewforum.php Multiple Vulnerabilities
2005-05-14 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.7%
Related for NVD:CVE-2005-1616