CVE-2005-0869 Information disclosure in n/a
Remote attackers can obtain sensitive path information by directly requesting specific PHP files, revealing internal server paths in error messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-0869?
CVE-2005-0869 is a medium-severity vulnerability in n/a, published on 26 Mar 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php, (5) XPath.class.php, (6) system_header.php, or (7) system_footer.php, which reveal the path in a PHP error message.
Which versions are affected by CVE-2005-0869?
It affects 1 product.
Products include Phpsysinfo Phpsysinfo.
How do I fix CVE-2005-0869?
Upgrade to a fixed version.
Is CVE-2005-0869 being exploited?
There is no known exploitation of CVE-2005-0869 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2023-49006 Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability
- CVE-2006-3360 phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
- CVE-2007-4048 Cross-site scripting in n/a
- CVE-2005-3348 Other in n/a
- CVE-2005-0870 Cross-site scripting in n/a
Sources
Also known as DEBIAN-CVE-2005-0869, GHSA-76ph-wfwc-34jh.