medium5.0
CVE-2005-3049
PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtai…
Impact
PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct request to the data/tracking[DATE] file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyfaq | Phpmyfaq | Version 1.5.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112749230124091&w=2
- http://rgod.altervista.org/phpmyfuck151.html
- http://secunia.com/advisories/16933
- http://securitytracker.com/id?1014968
- http://www.osvdb.org/19670
- http://www.securityfocus.com/bid/14930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22405
- http://marc.info/?l=bugtraq&m=112749230124091&w=2
- http://rgod.altervista.org/phpmyfuck151.html
- http://secunia.com/advisories/16933
- http://securitytracker.com/id?1014968
- http://www.osvdb.org/19670
- http://www.securityfocus.com/bid/14930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22405