CVE-2005-2652

Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) blacklist.php, (5) zorum/forum.php, (6) globalstat.php, (7) gorum/trace.php, (8) gorum/badwords.php, or (9) gorum/flood.php.

• http://marc.info/?l=bugtraq&m=112438781604862&w=2
• http://rgod.altervista.org/zorum.htmlExploit, Vendor Advisory
• http://securitytracker.com/id?1014725Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21914
• http://marc.info/?l=bugtraq&m=112438781604862&w=2
• http://rgod.altervista.org/zorum.htmlExploit, Vendor Advisory
• http://securitytracker.com/id?1014725Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21914

Published

Aug 23, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2646Unknown vulnerability in Xerox MicroServer Web Server in Doc…
• CVE-2005-2647Cross-site scripting (XSS) vulnerability in Xerox MicroServe…
• CVE-2005-2648Directory traversal vulnerability in index.php in W-Agora 4.…
• CVE-2005-2649Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 all…
• CVE-2005-2650Cross-site scripting (XSS) vulnerability in sign.asp in Emef…
• CVE-2005-2651gorum/prod.php in Zorum 3.5 allows remote attackers to execu…
• CVE-2005-2653Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allo…
• CVE-2005-2654phpldapadmin before 0.9.6c allows remote attackers to gain a…
• CVE-2005-2655lockmail in maildrop before 1.5.3 does not drop privileges b…
• CVE-2005-2656Polygen before 1.0.6 generates precompiled grammar objects w…
• CVE-2005-2657Unknown vulnerability in common-lisp-controller 4.18 and ear…
• CVE-2005-2658Buffer overflow in utility.cpp in Turquoise SuperStat (turqs…