CyberSec.Space Logo
Back to CVE Browser

CVE-2005-0855

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0750%
EPSS Percentile35.58th
PublishedMay 2, 2005
Last ModifiedApr 16, 2026

Vulnerability Description

CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to (1) entete.php, (2) profile_accueil.php, (3) profile_mdp.php, (4) profile_notify.php, (5) profile_options.php, (6) profile_perso.php, (7) profile_pm.php, or (8) readannonce.php, which leaks the full pathname in a PHP error message.

Affected Platforms (CPE)

📦
Coolforum

Coolforum

<= 0.8.1_beta

References & Advisories

🔗 http://seclists.org/lists/bugtraq/2005/Mar/0358.html
🔗 http://securitytracker.com/id?1013474
🔗 http://seclists.org/lists/bugtraq/2005/Mar/0358.html
🔗 http://securitytracker.com/id?1013474

Related Vulnerabilities

CVE-2005-08567.5

CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.php or (2) v...

CVE-2005-08587.5

Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (...

CVE-2006-28677.5

SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL c...

CVE-2002-15155.0

Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot ...