CVE-2005-2433
- State
- Published
- Severity
- Not scored
- Published
- Aug 3, 2005
- Updated
- Aug 7, 2024
- Reserved
- Aug 3, 2005
Description
PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php or (4) usercheck.php in public_html/lists/admin directory, (5) attributes.php, (6) dbcheck.php, (7) importcsv.php, (8) user.php, (9) usermgt.php, or (10) users.php in admin/commonlib/pages directory, (11) helloworld.php, or (12) sidebar.php in public_html/lists/admin/plugins directory, or (13) main.php in public_html/lists/admin/plugsins/defaultplugin directory, which reveal the path in an error message.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 18329vdb-entry
- 18323vdb-entry
- 18321vdb-entry
- 18326vdb-entry
- phplist-multiple-scripts-path-disclosure(21579)vdb-entry
- 18322vdb-entry
- 18325vdb-entry
- 18327vdb-entry
- 18328vdb-entry
- 18318vdb-entry
- 18324vdb-entry
- 18317vdb-entry
- 20050728 PhpList Sql Injection and Path Disclosuremailing-list
- 18320vdb-entry
- 18319vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.