CVE-2005-0827

MEDIUM 5.0CVE-2005-0827 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0827 is a MEDIUM (CVSS 5.0) vulnerability affecting ciamos (ciamos), e-xoops (e-xoops), runcms (runcms).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ciamos ciamos	`= 0.9.2_rc1`	No fix yet
e-xoops e-xoops	`= 1.05_rev3`	No fix yet
runcms runcms	`= 1.1a`	No fix yet

Description

Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which reveals the path in a PHP error message.

References

marc.info
marc.info
secunia.com/advisories/14641 · Patch
ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/19755

More vulnerabilities in ciamos

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free