Vulnerability in Battleaxe Software Bttlxeforum
CVE-2005-1570
forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability.
EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.
Affected products
- Battleaxe_software Bttlxeforum — versions 2.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)