CVE-2005-0871: Medium severity Phpbb Group Phpbb vulnerability

Published Mar 26, 2005

Updated

calendarscheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message.

Affected Software

1 affected component

Phpbb Group Phpbb=1.0.1

Event History

Mar 26, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0871?

CVE-2005-0871 is classified as a moderate severity vulnerability due to the potential exposure of sensitive information.

How do I fix CVE-2005-0871?

To fix CVE-2005-0871, you should upgrade to a newer version of the Topic Calendar module that addresses this vulnerability.

What could happen if CVE-2005-0871 is exploited?

If CVE-2005-0871 is exploited, attackers may gain access to sensitive information such as file paths from error messages.

Which software is impacted by CVE-2005-0871?

CVE-2005-0871 affects the Topic Calendar module version 1.0.1 for phpBB running on Microsoft IIS servers.

Is CVE-2005-0871 a remote attack vulnerability?

Yes, CVE-2005-0871 allows remote attackers to exploit the vulnerability through invalid parameters.