Unscored CVE-2005-0630 EUVD-2005-0631GHSA-4prx-qrq5-wg56

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.

Published Mar 4, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.

References

pblang-sendpm-obtain-information(19544) vdb-entry
http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1
20050301 Software PBLang 4.63 sendpm.php reply file read vulnerability mailing-list
12690 vdb-entry