XOOPS Information Disclosure Vulnerability
BID:6393
Info
XOOPS Information Disclosure Vulnerability
| Bugtraq ID: | 6393 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2002 12:00AM |
| Updated: | Dec 13 2002 12:00AM |
| Credit: | The discovery of this vulnerability is credited to Val Deux <[email protected]>. |
| Vulnerable: |
Xoops Xoops 1.0 RC3 |
| Not Vulnerable: | |
Discussion
XOOPS Information Disclosure Vulnerability
A vulnerability has been discovered in XOOPS R3, which may make it possible for an unauthorized user to view private messages. This is due to insufficient permission checking by the vulnerable script.
Information gained by exploiting this issue may aid an attacker in launching further attacks against the vulnerable site or other users.
A vulnerability has been discovered in XOOPS R3, which may make it possible for an unauthorized user to view private messages. This is due to insufficient permission checking by the vulnerable script.
Information gained by exploiting this issue may aid an attacker in launching further attacks against the vulnerable site or other users.