CVE-2005-4609

index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-12-31

Last modified

2024-08-07

Affected products

• Bugport (Incogen)

References

• http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html
• http://secunia.com/advisories/18282
• http://www.osvdb.org/22144
• http://www.vupen.com/english/advisories/2006/0009
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23921