CVE-2005-0572

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110935172116369&w=2
http://neossecurity.net/Advisories/Advisory-05.txtVendor Advisory, URL Repurposed
http://www.gentoo.org/security/en/glsa/glsa-200503-04.xmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19480
http://marc.info/?l=bugtraq&m=110935172116369&w=2
http://neossecurity.net/Advisories/Advisory-05.txtVendor Advisory, URL Repurposed
http://www.gentoo.org/security/en/glsa/glsa-200503-04.xmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19480

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-05735.0Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename CVE-2005-05745.0Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the CVE-2005-05757.5Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary CVE-2005-05763.6Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modif CVE-2005-05775.1Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font CVE-2005-05782.1Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users CVE-2005-05794.6nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to acc CVE-2005-05802.1cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the CVE-2005-05814.6Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code vi CVE-2005-058210.0Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in CVE-2005-05835.0Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via CVE-2005-05842.6Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that gener