CVE-2005-2433 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-2433
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-2433

Description: PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php or (4) usercheck.php in public_html/lists/admin directory, (5) attributes.php, (6) dbcheck.php, (7) importcsv.php, (8) user.php, (9) usermgt.php, or (10) users.php in admin/commonlib/pages directory, (11) helloworld.php, or (12) sidebar.php in public_html/lists/admin/plugins directory, or (13) main.php in public_html/lists/admin/plugsins/defaultplugin directory, which reveal the path in an error message.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/21579 OSVDB 18329 18328 18327 18326 18325 18324 18323 18322 18321 18320 18319 18318 18317 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=112258115325054&w=2

Return to the previous page.