{"edition": 1, "title": "phpwsContacts Anonymous CSV Export information disclosure", "bulletinFamily": "software", "published": "2004-04-22T09:05:26", "lastseen": "2017-04-28T13:20:00", "history": [], "modified": "2004-04-22T09:05:26", "reporter": "Paul the lost boyscout(lostboyscout@users.sourceforge.net)", "hash": "ad4245c3c1c49953fd20801565178923656dd2260f1c2584cd917d73d7e657d2", "viewCount": 3, "href": "https://vulners.com/osvdb/OSVDB:5677", "description": "## Vulnerability Description\nphpwsContacts contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the allow_anon_view setting is disabled, anonymous users can still perform exports, which will disclose user contact information resulting in a loss of confidentiality.\n## Solution Description\nUpgrade to phpwsContacts version 0.8.3 and phpwsBB 0.9.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nphpwsContacts contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the allow_anon_view setting is disabled, anonymous users can still perform exports, which will disclose user contact information resulting in a loss of confidentiality.\n## References:\nVendor URL: http://phpwscontacts.sourceforge.net/\n[Vendor Specific Advisory URL](http://sourceforge.net/tracker/index.php?func=detail&aid=940306&group_id=83662&atid=570207)\n[Secunia Advisory ID:11480](https://secuniaresearch.flexerasoftware.com/advisories/11480/)\n[Related OSVDB ID: 5678](https://vulners.com/osvdb/OSVDB:5678)\n", "affectedSoftware": [{"name": "phpwsContacts", "version": "0.8.2", "operator": "eq"}], "type": "osvdb", "hashmap": [{"key": "affectedSoftware", "hash": "e859818b0249e7cfc5dd39cc6ca72884"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "b22ec1dcd762074c04dc9f7655b83a47"}, {"key": "href", "hash": "26f662ac7db7c40dbb08c5436f152ab8"}, {"key": "modified", "hash": "bac841230b3601639b8792ffa255f06f"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "bac841230b3601639b8792ffa255f06f"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "51f8605a6e4480d0c0fe4984c7a95323"}, {"key": "title", "hash": "baee22c22b4161c5f3fd4f005a8bc8b4"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "references": [], "objectVersion": "1.2", "enchantments": {"score": {"vector": "NONE", "value": 5.0}, "vulnersScore": 5.0}, "cvss": {"vector": "NONE", "score": 0.0}, "cvelist": [], "id": "OSVDB:5677"}

{}