CVE

Id
13680  
CVE No.
CVE-2005-2474  
Status
Candidate  
Description
ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, an invalid Number parameter to (8) SelectList.php or (9) SelectDelete.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php, which reveal the path in an error message.  
Phase
Assigned (20050805)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
99562 13680 CVE-2005-2474 BUGTRAQ:20050801 ChurchInfo Multiple Vulnerabilities  View
99563 13680 CVE-2005-2474 URL:http://marc.info/?l=bugtraq&m=112291550713546&w=2  View
99564 13680 CVE-2005-2474 OSVDB:18429  View
99565 13680 CVE-2005-2474 URL:http://www.osvdb.org/18429  View
99566 13680 CVE-2005-2474 OSVDB:18430  View
99567 13680 CVE-2005-2474 URL:http://www.osvdb.org/18430  View
99568 13680 CVE-2005-2474 OSVDB:18431  View
99569 13680 CVE-2005-2474 URL:http://www.osvdb.org/18431  View
99570 13680 CVE-2005-2474 OSVDB:18432  View
99571 13680 CVE-2005-2474 URL:http://www.osvdb.org/18432  View
99572 13680 CVE-2005-2474 OSVDB:18433  View
99573 13680 CVE-2005-2474 URL:http://www.osvdb.org/18433  View
99574 13680 CVE-2005-2474 OSVDB:18434  View
99575 13680 CVE-2005-2474 URL:http://www.osvdb.org/18434  View
99576 13680 CVE-2005-2474 OSVDB:18435  View
99577 13680 CVE-2005-2474 URL:http://www.osvdb.org/18435  View
99578 13680 CVE-2005-2474 OSVDB:18436  View
99579 13680 CVE-2005-2474 URL:http://www.osvdb.org/18436  View
99580 13680 CVE-2005-2474 OSVDB:18437  View
99581 13680 CVE-2005-2474 URL:http://www.osvdb.org/18437  View
99582 13680 CVE-2005-2474 OSVDB:18438  View
99583 13680 CVE-2005-2474 URL:http://www.osvdb.org/18438  View
99584 13680 CVE-2005-2474 OSVDB:18439  View
99585 13680 CVE-2005-2474 URL:http://www.osvdb.org/18439  View
99586 13680 CVE-2005-2474 OSVDB:18450  View
99587 13680 CVE-2005-2474 URL:http://www.osvdb.org/18450  View
99588 13680 CVE-2005-2474 OSVDB:18425  View
99589 13680 CVE-2005-2474 URL:http://www.osvdb.org/18425  View
99590 13680 CVE-2005-2474 OSVDB:18426  View
99591 13680 CVE-2005-2474 URL:http://www.osvdb.org/18426  View
99592 13680 CVE-2005-2474 SECTRACK:1014617  View
99593 13680 CVE-2005-2474 URL:http://securitytracker.com/id?1014617  View
99594 13680 CVE-2005-2474 SECUNIA:16292  View
99595 13680 CVE-2005-2474 URL:http://secunia.com/advisories/16292  View
99596 13680 CVE-2005-2474 XF:churchinfo-path-disclosure(21648)  View

Related JVN