Lucene search

MitreCVE-2005-2381

HistoryJul 26, 2005 - 4:00 a.m.

CVE-2005-2381

2005-07-2604:00:00

mitre

web.nvd.nist.gov

cve-2005-2381

php surveyor

sensitive information disclosure

remote attackers

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

77.6%

JSON

PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to (1) question.php, (2) survey.php, or (3) group.php in the root directory, a direct request to (4) database.php, (5) sessioncontrol.php, (6) html.php, (7) sessioncontrol.php, an invalid (8) qid parameter to dumpquestion.php, or an invalid lid parameter to (9) labels.php or (10) dumplabel.php, which reveal the path in an error message.

Affected configurations

Nvd

Node

php_surveyorphp_surveyorMatch0.98

VendorProductVersionCPE
php_surveyorphp_surveyor0.98cpe:2.3:a:php_surveyor:php_surveyor:0.98:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
php_surveyor	php_surveyor	0.98	cpe:2.3:a:php_surveyor:php_surveyor:0.98:::::::*

References

marc.info/?l=bugtraq&m=112188282401681&w=2

secunia.com/advisories/16123

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

77.6%

JSON

Related for CVE-2005-2381