Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2005-2817

EPSS 0.59% · P69
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2005-2817

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Simple Machines Forum信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Simple Machines Forum（SMF）是美国SMF团队开发的一套开源、专业级的论坛软件包，它包含一个能够完全掌控论坛界面和布局的可定制模板引擎，并提供一种可实现论坛与网站相互给合的SSI（Server Side Includes）技术。 Simple Machines Forum (SMF)1-0-5及以前版本支持avatar图像使用URL，这样远程攻击者就可以监控到论坛访客的敏感信息，比如IP地址、用户代理，正如在恶意服务器上使用PHP脚本那样。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2005-2817

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-2817

请登录查看更多情报信息。

Same Patch Batch · n/a · 2005-09-07 · 21 CVEs total

CVE-2005-2815FlatNuke print.php信息泄漏或拒绝服务漏洞
CVE-2005-2840MAXdev MD-Pro多个未知漏洞
CVE-2005-2839MAXdev MD-Pro 多个跨站脚本漏洞
CVE-2005-2838MyBloggie login.php SQL 注入漏洞
CVE-2005-2837PlainBlack WebGUI 多个eval注入漏洞
CVE-2005-2836Phorum多个跨站脚本漏洞
CVE-2005-2820SqWebMail 跨站脚本漏洞
CVE-2005-2819DownFile权限提升漏洞
CVE-2005-2818DownFile 跨站脚本漏洞
CVE-2005-2816Greymatter跨站脚本漏洞
CVE-2005-2794Squid Proxy store.c远程拒绝服务漏洞
CVE-2005-2814FlatNuke vis_reg跨站脚本漏洞
CVE-2005-2813Flatnuke Index.PHP 目录遍历漏洞
CVE-2005-2812man2web远程命令执行漏洞
CVE-2005-2811Net-SNMP不可信搜索路径漏洞
CVE-2005-2810Urban多个栈缓冲区溢出漏洞
CVE-2005-2809SILC Server以不安全方式创建临时文件漏洞
CVE-2005-2808Frox绕过访问限制漏洞
CVE-2005-2807Frox 任意配置文件访问漏洞
CVE-2005-2796Squid sslConnectTimeout 函数拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-2817

No comments yet

Leave a comment