CVE-2005-1235 auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb-auction | = 1.0m | No fix listed |
| phpbb group phpbb-auction | = 1.2m | No fix listed |
References
- 15029 third-party-advisory
- 1013779 exploit vdb-entry
- 15706 vdb-entry
- www.phpbb-auction.com exploit patch
- www.snkenjoi.com exploit