Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-0259
HistoryMar 14, 2005 - 12:00 a.m.

CVE-2005-0259

2005-03-1400:00:00
ubuntu.com
ubuntu.com
4

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

63.9%

phpBB 2.0.11, and possibly other versions, with remote avatars and avatar
uploading enabled, allows local users to read arbitrary files by providing
both a local and remote location for an avatar, then modifying the “Upload
Avatar from a URL:” field to reference the target file.

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

63.9%