CVE-2005-2817

Exploit

EPSS 0.59%
Veröffentlicht 07.09.2005 19:07:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Simple Machines ≫ Simple Machines Forum Version1.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.59%	0.666

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://rgod.altervista.org/smf105.html

Exploit

http://seclists.org/lists/bugtraq/2005/Aug/0438.html

Exploit

http://secunia.com/advisories/16646

http://securitytracker.com/id?1014828

https://exchange.xforce.ibmcloud.com/vulnerabilities/22093

https://nvd.nist.gov/vuln/detail/CVE-2005-2817

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-2817

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-2817

EUVD