1. Home
  2. CVE Database
  3. CVE-2005-2229
HIGH · 7.5

CVE-2005-2229

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with insufficient access control, which allows remote attackers to obtain s...

Vulnerability Description

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with insufficient access control, which allows remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
Blog TorrentBlog Torrent<= 0.92

References

FAQ

What is CVE-2005-2229?

CVE-2005-2229 is a vulnerability with a CVSS score of 7.5 (HIGH). Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with insufficient access control, which allows remote attackers to obtain s...

How severe is CVE-2005-2229?

CVE-2005-2229 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2005-2229?

Check the references section above for vendor advisories and patch information. Affected products include: Blog Torrent Blog Torrent.