CVEvulnerability
CVE-2005-0630
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-03-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.
Affected configurations
• pblang pblang 4.0
• pblang pblang 4.6
• pblang pblang 4.56 4.5 rc2
• pblang pblang 4.63
References
- http://marc.info/?l=bugtraq&m=110971002211589&w=2 marc.info
- http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1 pblforum.drmartinus.de
- http://www.securityfocus.com/bid/12690 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19544 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=110971002211589&w=2 marc.info
- http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1 pblforum.drmartinus.de
- http://www.securityfocus.com/bid/12690 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19544 exchange.xforce.ibmcloud.com