CVE-2005-4346

{"id": "CVE-2005-4346", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-19T03:47:00.000", "references": [{"url": "http://pridels0.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/21565", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.outshine.com/forums/viewtopic.php?t=308", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23495", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to obtain the full path of the application via an invalid permalink parameter to index.php, which produces an invalid SQL query that leaks the full pathname in a SQL syntax error message. NOTE: this was originally claimed to be SQL injection, but a cleansing step strips all non-digit characters and leaves an empty permalink argument, which leads to the syntax error."}, {"lang": "es", "value": "Vulnerabilidad de error de sintaxis SQL no v\u00e1lido en blog.php de phpBB Blog 2.2.2 y anteriores permite a atacantes remotos obtener la ruta completa de la aplicaci\u00f3n mediante un par\u00e1metro \"permalink\" no v\u00e1lido para index.php, lo que filtra la ruta completa en un mensaje de error de sintaxis de SQL. NOTA: Anteriormente se afirm\u00f3 que esta era una vulnerabilidad de inyecci\u00f3n de SQL, pero un paso de limpieza extrae todos los caract\u00e9res no d\u00edgitos, y deja un argumento \"permalink\" vac\u00edo, lo que conduce al error de sintaxis."}], "lastModified": "2017-07-20T01:29:13.470", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:anthony_boyd:phpbb_blog:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1D947CC-28AC-4A30-AED3-A5443815E5C6", "versionEndIncluding": "2.2.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}