{"api_version":"1","generated_at":"2026-07-23T11:29:41+00:00","cve":"CVE-2005-0655","urls":{"html":"https://cve.report/CVE-2005-0655","api":"https://cve.report/api/cve/CVE-2005-0655.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-0655","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-0655"},"summary":{"title":"CVE-2005-0655","description":"auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-05-02 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://echo.or.id/adv/adv011-y3dips-2005.txt","name":"http://echo.or.id/adv/adv011-y3dips-2005.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ECHO","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://marc.info/?l=bugtraq&m=110979842315750&w=2","name":"http://marc.info/?l=bugtraq&m=110979842315750&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Vulnerabilities in Aura CMS' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1013357","name":"http://securitytracker.com/id?1013357","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SecurityTracker.com Archives - auraCMS Discloses Path to Remote Users and Permits Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0655","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0655","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"655","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"arif_supriyanto","cpe5":"auracms","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:21:06.486Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20050302 Vulnerabilities in Aura CMS","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=110979842315750&w=2"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://echo.or.id/adv/adv011-y3dips-2005.txt"},{"name":"1013357","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1013357"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-03-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-10-17T13:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20050302 Vulnerabilities in Aura CMS","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=110979842315750&w=2"},{"tags":["x_refsource_MISC"],"url":"http://echo.or.id/adv/adv011-y3dips-2005.txt"},{"name":"1013357","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1013357"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-0655","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20050302 Vulnerabilities in Aura CMS","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=110979842315750&w=2"},{"name":"http://echo.or.id/adv/adv011-y3dips-2005.txt","refsource":"MISC","url":"http://echo.or.id/adv/adv011-y3dips-2005.txt"},{"name":"1013357","refsource":"SECTRACK","url":"http://securitytracker.com/id?1013357"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-0655","datePublished":"2005-03-07T05:00:00.000Z","dateReserved":"2005-03-07T00:00:00.000Z","dateUpdated":"2024-08-07T21:21:06.486Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-05-02 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arif_supriyanto:auracms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"83A0A9CB-6F69-4E7D-97E3-876E26AFA013"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"655","Ordinal":"1","Title":"CVE-2005-0655","CVE":"CVE-2005-0655","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"655","Ordinal":"1","NoteData":"auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.","Type":"Description","Title":"CVE-2005-0655"},{"CveYear":"2005","CveId":"655","Ordinal":"2","NoteData":"2005-03-07","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"655","Ordinal":"3","NoteData":"2016-10-17","Type":"Other","Title":"Modified"}]}}}