Description
Directory traversal vulnerability in Advanced Electron Forum (AEF) 1.x allows remote attackers to determine the existence of arbitrary files via the avatargalfile parameter when changing an avatar, which leaks the existence of the file in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51776
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/35646
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/55926
Scores
EPSS
0.0131
EPSS Percentile
67.2%
Details
CWE
CWE-22
Status
published
Products (8)
anelectron/advanced_electron_forum
1.0.1
anelectron/advanced_electron_forum
1.0.2
anelectron/advanced_electron_forum
1.0.3
anelectron/advanced_electron_forum
1.0.4
anelectron/advanced_electron_forum
1.0.5
anelectron/advanced_electron_forum
1.0.6
anelectron/advanced_electron_forum
1.0.7
anelectron/advanced_electron_forum
1.0.8
Published
Jul 20, 2009
Tracked Since
Feb 18, 2026