CVE

Id
12034  
CVE No.
CVE-2005-0828  
Status
Candidate  
Description
highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from mainfile.php.  
Phase
Assigned (20050322)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
86345 12034 CVE-2005-0828 BUGTRAQ:20050318 runcms highlight.php hole  View
86346 12034 CVE-2005-0828 URL:http://marc.info/?l=bugtraq&m=111117241923006&w=2  View
86347 12034 CVE-2005-0828 BUGTRAQ:20050319 Ciamos Highlight.php Security Hole(IHS)  View
86348 12034 CVE-2005-0828 URL:http://marc.info/?l=bugtraq&m=111125645312693&w=2  View
86349 12034 CVE-2005-0828 MISC:http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf  View
86350 12034 CVE-2005-0828 MISC:http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt  View
86351 12034 CVE-2005-0828 BID:12848  View
86352 12034 CVE-2005-0828 URL:http://www.securityfocus.com/bid/12848  View
86353 12034 CVE-2005-0828 OSVDB:14890  View
86354 12034 CVE-2005-0828 URL:http://www.osvdb.org/14890  View
86355 12034 CVE-2005-0828 SECTRACK:1013485  View
86356 12034 CVE-2005-0828 URL:http://securitytracker.com/id?1013485  View
86357 12034 CVE-2005-0828 SECUNIA:14648  View
86358 12034 CVE-2005-0828 URL:http://secunia.com/advisories/14648  View
86359 12034 CVE-2005-0828 SECUNIA:14641  View
86360 12034 CVE-2005-0828 URL:http://secunia.com/advisories/14641  View
86361 12034 CVE-2005-0828 XF:ciamos-file-information-disclosure(19754)  View

Related JVN