THREATPORT/VULNERABILITY/CVE-2005-1201
MEDIUM SEVERITY

CVE-2005-1201

Az Bulletin Board vulnerability

CVSS
6.4
EPSS
3.4%
EPSS pct
87th
Exploited
No known
Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to delete arbitrary files via a .. (dot dot) in the URL to admin_avatar.php or admin_attachment.php or (2) remote attackers to enumerate files via a .. (dot dot) in the attachment parameter to attachment.php, which displays a different message when a file exists or does not exist.
Affected vendor
Azbb
Affected product
Az Bulletin Board
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:N
Published
2005-05-02

Risk analysis

Based on its CVSS vector, this vulnerability is exploitable over the network, low attack complexity, requiring no authentication. Successful exploitation leads to partial impact to confidentiality, partial impact to integrity.

Its EPSS score of 3.4% reflects a lower probability of exploitation activity in the wild over the next 30 days, placing it above 87% of all scored CVEs.

Check your external exposure to CVE-2005-1201

  • Confirm whether Azbb Az Bulletin Board is running on any internet-facing host or subdomain.
  • Match discovered service fingerprints against the version affected by CVE-2005-1201.
  • Prioritise remediation if the asset is public, business-critical, or near authentication/payment flows.

How ThreatPort helps with CVE-2005-1201

ThreatPort's external attack surface scanner checks your internet-facing assets — agentlessly, from the outside in — for the exposed services and versions that CVE-2005-1201 affects, then prioritises the finding by real risk using CISA KEV and FIRST.org EPSS.

Run a free external exposure scan

Are you exposed to CVE-2005-1201?

Run an instant, non-intrusive external scan to check your attack surface for CVE-2005-1201.

Start free scan

No credit card. Agentless.

Related vulnerabilities

MEDIUM
CVE-2015-7615
Acrobat vulnerability
MEDIUM
CVE-2015-7616
Acrobat vulnerability
MEDIUM
CVE-2015-7617
Acrobat vulnerability