Search...

DbbS topics.php fcategoryid Variable Path Disclosure

2006-04-16T03:03:42

ID OSVDB:24955
Type osvdb
Reporter OSVDB
Modified 2006-04-16T03:03:42

Description

Manual Testing Notes

http://[target]/DbbS/topics.php?fcategoryid='

References:

Vendor URL: http://www.dbbs.sup.fr/ Related OSVDB ID: 24957 Related OSVDB ID: 24956 Related OSVDB ID: 24958 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0327.html CVE-2006-1914

JSON Vulners Source

Initial Source

{"enchantments": {"score": {"value": 6.1, "vector": "NONE", "modified": "2017-04-28T13:20:21", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2006-1914"]}, {"type": "osvdb", "idList": ["OSVDB:24956"]}], "modified": "2017-04-28T13:20:21", "rev": 2}, "vulnersScore": 6.1}, "bulletinFamily": "software", "affectedSoftware": [], "references": [], "href": "https://vulners.com/osvdb/OSVDB:24955", "id": "OSVDB:24955", "title": "DbbS topics.php fcategoryid Variable Path Disclosure", "type": "osvdb", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}, "lastseen": "2017-04-28T13:20:21", "edition": 1, "reporter": "OSVDB", "description": "## Manual Testing Notes\nhttp://[target]/DbbS/topics.php?fcategoryid='\n## References:\nVendor URL: http://www.dbbs.sup.fr/\n[Related OSVDB ID: 24957](https://vulners.com/osvdb/OSVDB:24957)\n[Related OSVDB ID: 24956](https://vulners.com/osvdb/OSVDB:24956)\n[Related OSVDB ID: 24958](https://vulners.com/osvdb/OSVDB:24958)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0327.html\n[CVE-2006-1914](https://vulners.com/cve/CVE-2006-1914)\n", "modified": "2006-04-16T03:03:42", "viewCount": 6, "published": "2006-04-16T03:03:42", "cvelist": ["CVE-2006-1914"]}

{"cve": [{"lastseen": "2021-02-02T05:27:20", "description": "DbbS 2.0-alpha and earlier allows remote attackers to obtain sensitive information via an invalid (1) fcategoryid parameter to topics.php or (2) unavariabile, (3) GLOBALS, or (4) _SERVER[] parameters to script.php. NOTE: this information leak might be resultant from a global variable overwrite issue.", "edition": 6, "cvss3": {}, "published": "2006-04-20T18:06:00", "title": "CVE-2006-1914", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2006-1914"], "modified": "2017-07-20T01:31:00", "cpe": ["cpe:/a:dbbs:dbbs:2.0-alpha"], "id": "CVE-2006-1914", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-1914", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "cpe23": ["cpe:2.3:a:dbbs:dbbs:2.0-alpha:*:*:*:*:*:*:*"]}], "osvdb": [{"lastseen": "2017-04-28T13:20:21", "bulletinFamily": "software", "cvelist": ["CVE-2006-1914"], "edition": 1, "description": "## Manual Testing Notes\nhttp://[target]/DbbS/script.php?unavariabile[]=\nhttp://[target]/DbbS/script.php?GLOBALS[]=\nhttp://[target]/DbbS/script.php?_SERVER[]=\n## References:\nVendor URL: http://www.dbbs.sup.fr/\n[Related OSVDB ID: 24957](https://vulners.com/osvdb/OSVDB:24957)\n[Related OSVDB ID: 24958](https://vulners.com/osvdb/OSVDB:24958)\n[Related OSVDB ID: 24955](https://vulners.com/osvdb/OSVDB:24955)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0327.html\n[CVE-2006-1914](https://vulners.com/cve/CVE-2006-1914)\n", "modified": "2006-04-16T03:03:42", "published": "2006-04-16T03:03:42", "href": "https://vulners.com/osvdb/OSVDB:24956", "id": "OSVDB:24956", "title": "DbbS script.php Multiple Variable Path Disclosure", "type": "osvdb", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}]}