CVE-2005-1621: Medium severity Postnuke Software Foundation Postnuke vulnerability
Published May 16, 2005
·Updated
Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read arbitrary files via a .. (dot dot) in the func parameter to index.php.
Affected Software
4 affected components
Postnuke Software Foundation Postnuke=0.750
Postnuke Software Foundation Postnuke=0.760_rc2
Postnuke Software Foundation Postnuke=0.760_rc3
Postnuke Software Foundation Postnuke=0.760_rc4
Remediation
Event History
May 16, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1621?
CVE-2005-1621 is classified as a moderate severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2005-1621?
To fix CVE-2005-1621, update to a version of PostNuke that is patched against this vulnerability, specifically versions after 0.760rc4.
3
What types of attacks can exploit CVE-2005-1621?
CVE-2005-1621 can be exploited through directory traversal attacks, allowing attackers to read files on the server.
4
Which versions of PostNuke are affected by CVE-2005-1621?
CVE-2005-1621 affects PostNuke versions 0.750 to 0.760rc4.
5
What is the impact of exploiting CVE-2005-1621?
Exploiting CVE-2005-1621 can lead to unauthorized access to sensitive files on the server.