CVE-2005-0572: Medium severity phpWebSite phpWebSite vulnerability
Published Feb 27, 2005
·Updated
index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEAsearchmodule parameter, which reveals the path in a PHP error message.
Affected Software
10 affected components
phpWebSite phpWebSite=0.9.1
phpWebSite phpWebSite=0.9.2
phpWebSite phpWebSite=0.9.3.1
phpWebSite phpWebSite=0.9.3.4
phpWebSite phpWebSite=0.9.3.3
phpWebSite phpWebSite=0.9.2.1
phpWebSite phpWebSite=0.10.0
phpWebSite phpWebSite=0.9.3.2
phpWebSite phpWebSite=0.9.3
phpWebSite phpWebSite=0.9.0
Remediation
Patch Available
Event History
Feb 27, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0572?
CVE-2005-0572 has a medium severity rating due to its potential to disclose sensitive information.
2
How do I fix CVE-2005-0572?
To fix CVE-2005-0572, upgrade to a version of phpWebSite that is later than 0.10.0.
3
Who is affected by CVE-2005-0572?
Users of phpWebSite versions 0.9.0 through 0.10.0 are affected by CVE-2005-0572.
4
What kind of information is disclosed by CVE-2005-0572?
CVE-2005-0572 can divulge the installation path of the phpWebSite application through PHP error messages.
5
Is CVE-2005-0572 a remote vulnerability?
Yes, CVE-2005-0572 can be exploited remotely by an attacker using a malformed SEA_search_module parameter.