PT-2003-2500 · Scoznet · Scozbook

Euronymous · Publicado 2003-12-31 · Atualizado 2018-10-19 · CVE-2003-1555

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ScozNet ScozBook version 1.1 BETA

Description The issue allows remote attackers to obtain sensitive information. This is achieved via an invalid PG parameter in the "view.php" endpoint, which reveals the installation path in an error message.

Recommendations For version 1.1 BETA, avoid using the PG parameter in the "view.php" endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the "view.php" endpoint to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2003-1555

Produtos afetados

Scozbook

Referências · 8

• 🔥 https://exploit-db.com/exploits/22445 · Exploit
• 🔥 http://securityfocus.com/bid/7236 · Exploit
• http://securityreason.com/securityalert/3781 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11659 · Nota
• http://securitytracker.com/id?1006413 · Nota
• http://secunia.com/advisories/8476 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1555 · Nota de Segurança
• http://securityfocus.com/archive/1/316747/30/25280/threaded · Nota