CVE-2005-1050: Medium severity Postnuke Software Foundation Postnuke vulnerability
Published Apr 12, 2005
·Updated
The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message.
Affected Software
1 affected component
Postnuke Software Foundation Postnuke=0.760_rc3
Event History
Apr 12, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1050?
CVE-2005-1050 has a moderate severity rating due to its potential to disclose sensitive information.
2
How do I fix CVE-2005-1050?
To fix CVE-2005-1050, upgrade PostNuke to a version newer than 0.760-RC3 that addresses this vulnerability.
3
What type of information is exposed by CVE-2005-1050?
CVE-2005-1050 can expose the file system path of the server through error messages triggered by invalid parameters.
4
Who is affected by CVE-2005-1050?
Users of PostNuke version 0.760-RC3 are affected by CVE-2005-1050 and should take action to protect their installations.
5
Is CVE-2005-1050 a remote attack vulnerability?
Yes, CVE-2005-1050 allows remote attackers to exploit the Reviews module by sending specially crafted requests.