Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.19497
Kategorie:Web application abuses
Titel:Ultimate PHP Board users.dat Information Disclosure
Zusammenfassung:The remote host is running Ultimate PHP Board (UPB).;; The remote version of this software is prone to a weak password encryption; vulnerability and may store the users.dat file under the web document root; with insufficient access control.
Beschreibung:Summary:
The remote host is running Ultimate PHP Board (UPB).

The remote version of this software is prone to a weak password encryption
vulnerability and may store the users.dat file under the web document root
with insufficient access control.

Solution:
No known solution was made available for at least one year since the disclosure
of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer
release, disable respective features, remove the product or replace the product by another one.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Querverweis: BugTraq ID: 13975
Common Vulnerability Exposure (CVE) ID: CVE-2005-2005
Bugtraq: 20050616 M4DR007-06SA (security advisory): Multiple vulnerabilities in UPB 1.9.6 GOLD (Google Search)
http://marc.info/?l=bugtraq&m=111893777504821&w=2
http://secunia.com/advisories/15732
Common Vulnerability Exposure (CVE) ID: CVE-2005-2030
http://www.securityfocus.com/bid/13975
CopyrightCopyright (C) 2005 Josh Zlatin-Amishav

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.