CVE-2005-0603

viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

4.32% chance of exploitation in the next 30 days, 90th percentile

Published

2005-03-01

Updated

2024-08-07

Proof-of-concept exploits (1)

• Parcer0/CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure0★ · 2020-08-28

References

• CVE Record
• NVD entry

Related

• CVE-2006-0450
• CVE-2005-0602
• CVE-2005-0606
• CVE-2005-0595
• CVE-2005-0613
• CVE-2005-0582