Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-3049
HistorySep 24, 2005 - 12:03 a.m.

CVE-2005-3049

2005-09-2400:03:00
[email protected]
web.nvd.nist.gov
3

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.007

Percentile

81.3%

JSON

PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct request to the data/tracking[DATE] file.

Affected configurations

Nvd
Node
phpmyfaqphpmyfaqMatch1.5.1
VendorProductVersionCPE
phpmyfaqphpmyfaq1.5.1cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.1:*:*:*:*:*:*:*

Related

cve 1
nessus 2
cvelist 1
openvas 2
freebsd 1
cve
cve
CVE-2005-3049
2005-09-24 00:03:00
nessus
nessus
phpMyFAQ < 1.5.2 Multiple Vulnerabilities
2005-09-26 00:00:00
FreeBSD : phpmyfaq -- SQL injection, takeover, path disclosure, remote code execution (c6b9aee8-3071-11da-af18-000ae4641456)
2006-05-13 00:00:00
cvelist
cvelist
CVE-2005-3049
2005-09-23 04:00:00
openvas
openvas
FreeBSD Ports: phpmyfaq
2008-09-04 00:00:00
FreeBSD Ports: phpmyfaq
2008-09-04 00:00:00
freebsd
freebsd
phpmyfaq -- SQL injection, takeover, path disclosure, remote code execution
2005-09-23 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.007

Percentile

81.3%

JSON
Related for NVD:CVE-2005-3049
cve1nessus2cvelist1openvas2freebsd1