CVE-2005-0655: Medium severity Arif Supriyanto auraCMS vulnerability
Published Mar 7, 2005
·Updated
auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.
Affected Software
1 affected component
Arif Supriyanto auraCMS=1.5
Event History
Mar 7, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0655?
CVE-2005-0655 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2005-0655?
To fix CVE-2005-0655, you should sanitize inputs and handle errors properly to prevent PHP error messages from revealing sensitive information.
3
What type of attack does CVE-2005-0655 represent?
CVE-2005-0655 represents an information disclosure vulnerability that can be exploited by remote attackers.
4
Which versions of auraCMS are affected by CVE-2005-0655?
CVE-2005-0655 affects auraCMS version 1.5.
5
What files in auraCMS are associated with CVE-2005-0655?
CVE-2005-0655 is associated with the files teman.php, hal.php, and arsip.php in auraCMS.