CVE

Id
12407  
CVE No.
CVE-2005-1201  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to delete arbitrary files via a .. (dot dot) in the URL to admin_avatar.php or admin_attachment.php or (2) remote attackers to enumerate files via a .. (dot dot) in the attachment parameter to attachment.php, which displays a different message when a file exists or does not exist.  
Phase
Assigned (20050421)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
89182 12407 CVE-2005-1201 BUGTRAQ:20050420 Multiple Security Issues Found In AZBB  View
89183 12407 CVE-2005-1201 URL:http://marc.info/?l=bugtraq&m=111401838521857&w=2  View
89184 12407 CVE-2005-1201 MISC:http://www.gulftech.org/?node=research&article_id=00068-04192005  View
89185 12407 CVE-2005-1201 CONFIRM:http://azbb.cyaccess.com/azbb.php?1091778548  View
89186 12407 CVE-2005-1201 OSVDB:15701  View
89187 12407 CVE-2005-1201 URL:http://www.osvdb.org/15701  View
89188 12407 CVE-2005-1201 OSVDB:15702  View
89189 12407 CVE-2005-1201 URL:http://www.osvdb.org/15702  View
89190 12407 CVE-2005-1201 SECUNIA:15013  View
89191 12407 CVE-2005-1201 URL:http://secunia.com/advisories/15013  View
89192 12407 CVE-2005-1201 XF:az-bulletin-board-file-modification(20180)  View
89193 12407 CVE-2005-1201 URL:http://xforce.iss.net/xforce/xfdb/20180  View
89194 12407 CVE-2005-1201 XF:az-bulletin-board-file-existence(20183)  View

Related JVN