mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information via a ' (quote) value in the lng parameter, which reveals the path in an error message. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/8507 | Exploit Vendor Advisory |
http://www.osvdb.org/3666 | Vendor Advisory |
http://securitytracker.com/id?1007592 | Vendor Advisory |
http://secunia.com/advisories/9622 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/13042 |
Configurations
Information
Published : 2003-12-30 21:00
Updated : 2017-07-28 18:29
NVD link : CVE-2003-1316
Mitre link : CVE-2003-1316
JSON object : View
CWE
Products Affected
endonesia
- endonesia