SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message.
References
Link | Resource |
---|---|
http://www.zone-h.org/en/advisories/read/id=8650/ | Vendor Advisory |
http://secunia.com/advisories/18676 | Vendor Advisory |
http://www.vupen.com/english/advisories/2006/0398 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/24399 |
Configurations
Information
Published : 2006-02-02 03:02
Updated : 2017-07-19 18:29
NVD link : CVE-2006-0519
Mitre link : CVE-2006-0519
JSON object : View
CWE
Products Affected
spip
- spip