CVE-2005-2053

published 2005-06-28

CVE-2005-2053: Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id parameter, (2) a…

Priority P4 17 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id parameter, (2) a blank id parameter, or (3) an * (asterisk) in the disp parameter to index.php, which reveals the path in an error message. NOTE: a followup suggests that this may be a directory traversal or file inclusion vulnerability.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
salims_softhouse	jaf_cms	—	—
salims_softhouse	jaf_cms	—	—
salims_softhouse	jaf_cms	—	—
salims_softhouse	jaf_cms	—	—
salims_softhouse	jaf_cms	—	—
salims_softhouse	jaf_cms	—	—
salims_softhouse	jaf_cms	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-230