Vulnerabilities > CVE-2005-2652 - Unspecified vulnerability in PHPoutsourcing Zorum 3.5

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
phpoutsourcing
NVD
Published: 2005-08-23
Updated: 2024-11-21

Summary

Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) blacklist.php, (5) zorum/forum.php, (6) globalstat.php, (7) gorum/trace.php, (8) gorum/badwords.php, or (9) gorum/flood.php.

Vulnerable Configurations

Part Description Count
Application
Phpoutsourcing
1

References