CVE-2005-2053
N/A
Published: June 26, 2005 at 04:00 AM UTC
Updated: June 16, 2026 at 10:14 PM UTC
1 product affected across 1 vendorJaf CMS
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id parameter, (2) a blank id parameter, or (3) an * (asterisk) in the disp parameter to index.php, which reveals the path in an error message. NOTE: a followup suggests that this may be a directory traversal or file inclusion vulnerability.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (3)
x_refsource_MISCExploitVendor Advisory
Source: [email protected]
http://echo.or.id/adv/adv20-theday-2005.txtMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=111954840611126&w=2Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=111990004028512&w=2Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card