CVE-2005-1201

Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to…

published April 21, 2005

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to delete arbitrary files via a .. (dot dot) in the URL to admin_avatar.php or admin_attachment.php or (2) remote attackers to enumerate files via a .. (dot dot) in the attachment parameter to attachment.php, which displays a different message when a file exists or does not exist.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03362 · 88.6th percentile
Published
2005-04-21T04:00Z
EPSS history
Timeline
  • 21 APR 04:00Z
    Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to…
    cvelistv5