CVE

Id
59144  
CVE No.
CVE-2012-5901  
Status
Candidate  
Description
DFLabs PTK 1.0.5 stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read logs, images, or reports via a direct request to the file in the (1) log, (2) images, or (3) report directory.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603795 59144 CVE-2012-5901 MISC:http://packetstormsecurity.org/files/111360/PTK-1.0.5-Cross-Site-Scripting-Unrestricted-Access.html  View
603796 59144 CVE-2012-5901 BID:52817  View
603797 59144 CVE-2012-5901 URL:http://www.securityfocus.com/bid/52817  View
603798 59144 CVE-2012-5901 OSVDB:80773  View
603799 59144 CVE-2012-5901 URL:http://osvdb.org/80773  View
603800 59144 CVE-2012-5901 SECUNIA:48585  View
603801 59144 CVE-2012-5901 URL:http://secunia.com/advisories/48585  View
603802 59144 CVE-2012-5901 XF:ptk-info-disclosure(74491)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29694 JVNDB-2012-005401 GreenBrowser におけるクロスサイトスクリプティングの脆弱性 GreenBrowser には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5906 59144 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005401.html  View