CVE-2005-3586

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://irannetjob.com/content/view/153/28/Exploit, Vendor Advisory, URL Repurposed
http://marc.info/?l=bugtraq&m=113106195532404&w=2
http://irannetjob.com/content/view/153/28/Exploit, Vendor Advisory, URL Repurposed
http://marc.info/?l=bugtraq&m=113106195532404&w=2

Timeline

Published: Nov 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-358710.0Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vector CVE-2005-35887.5SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privil CVE-2005-35897.8Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER CVE-2005-35909.8The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer CVE-2005-35917.5Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attacker CVE-2005-35925.0index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the application by triggering an CVE-2005-35945.0game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, $player_score, and $g CVE-2005-359510.0By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to CVE-2005-35967.5SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the CVE-2005-36187.6Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2 CVE-2005-36196.8Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 u CVE-2005-36202.1The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records