CVE-2005-4358

admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter…

published December 20, 2005

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid append_sid function call that leaks the path in an error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02081 · 81.3th percentile
Published
2005-12-20T01:00Z
EPSS history
Timeline
  • 20 DEC 01:00Z
    admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter…
    cvelistv5