Vulnerability CVE-2003-1409
Published: 2003-12-31   Modified: 2012-02-12

Description:
TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2) out.php, which reveals the path to the TOPo directory in the error message.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
EJ3 -> TOPO 

 References:
http://archives.neohapsis.com/archives/bugtraq/2003-02/0049.html
http://www.securityfocus.com/bid/6768
https://exchange.xforce.ibmcloud.com/vulnerabilities/11248
Copyright 2024, cxsecurity.com

 

Back to Top