CVE-2005-3586 Information disclosure in n/a
Remote attackers can obtain the application installation path via error messages in Mambo CMS, potentially aiding further attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-3586?
CVE-2005-3586 is a medium-severity vulnerability in n/a, published on 16 Nov 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error.
Which versions are affected by CVE-2005-3586?
It affects 1 product.
Products include Mambo Mambo.
How do I fix CVE-2005-3586?
No fix has been published for CVE-2005-3586 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-3586 being exploited?
There is no known exploitation of CVE-2005-3586 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-246w-fpfv-wqx9.