« Volver al listado

CVE-2005-2423

Estado: ModificadaMedia (5)—

Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter to index.php or a direct request to (2) admin.php, (3) attachments.inc.php, (4) banned.inc.php, (5) beehive.inc.php, (6) constants.inc.php, (7) db.inc.php, (8) dictionary.inc.php or (9) search_index.php, which reveal the path in an error message.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Beehive Forum — Beehive ForumAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-2423",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-08-03T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=112230744103930&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/16217",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21536",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=112230744103930&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/16217",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21536",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter to index.php or a direct request to (2) admin.php, (3) attachments.inc.php, (4) banned.inc.php, (5) beehive.inc.php, (6) constants.inc.php, (7) db.inc.php, (8) dictionary.inc.php or (9) search_index.php, which reveal the path in an error message."
    },
    {
      "lang": "es",
      "value": "Beehive Forum permite que atacantes remotos obtengan información confidencial mediante: (1)  inválidos parámetros final_uri o sort_by parameter en  index.php o una petición directa a: (2) admin.php, (3) attachments.inc.php, (4) banned.inc.php, (5) beehive.inc.php, (6) constants.inc.php, (7) db.inc.php, (8) dictionary.inc.php or (9) search_index.php."
    }
  ],
  "lastModified": "2026-06-16T22:14:51.557",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.1:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B3C479F7-639D-4C3D-9449-E94426C3B1C3"
            },
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.1.1:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4EDD1988-4C10-4F78-A84A-AAFCB1DFFB6E"
            },
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BE8FB1E8-E4E3-4C72-9012-72D60E5C3B49"
            },
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.3:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BB948F88-6C9F-44B6-850F-9F6B02738A8F"
            },
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.3.1:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "400EACD2-95CE-404E-B8F8-21A92A6D7817"
            },
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.4:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6071EAB1-B425-43D7-ACDE-009972279603"
            },
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.5:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9D73944F-A924-4801-A819-730AB165171C"
            },
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc1:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F4543096-BA8B-41A0-B0F5-CE92A063898E"
            },
            {
              "criteria": "cpe:2.3:a:beehive_forum:beehive_forum:0.6rc2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C8E19DFA-F5D4-4D64-8B5D-65E10B7E1698"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}