MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message.
References
Configurations
History
20 Nov 2024, 23:47
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/8320 - Vendor Advisory | |
References | () http://securityreason.com/securityalert/3717 - | |
References | () http://www.securityfocus.com/archive/1/315317/30/25460/threaded - | |
References | () http://www.securityfocus.com/bid/7126 - Exploit | |
References | () http://www.securitytracker.com/id?1006308 - Exploit | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/11556 - |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:47
NVD link : CVE-2003-1548
Mitre link : CVE-2003-1548
CVE.ORG link : CVE-2003-1548
JSON object : View
Products Affected
myabracadaweb
- myabracadaweb
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor