ScozBook Path Disclosure Vulnerability
BID:7236
Info
ScozBook Path Disclosure Vulnerability
| Bugtraq ID: | 7236 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 29 2003 12:00AM |
| Updated: | Mar 29 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to "euronymous" <[email protected]>. |
| Vulnerable: |
ScozNet ScozBook 1.1 BETA |
| Not Vulnerable: | |
Discussion
ScozBook Path Disclosure Vulnerability
A path disclosure vulnerability has been reported for ScozBook. The issue occurs when a request is made to the view.php script page.
Access to sensitive filesystem information may aid an attacker in launching further attacks against a target system.
A path disclosure vulnerability has been reported for ScozBook. The issue occurs when a request is made to the view.php script page.
Access to sensitive filesystem information may aid an attacker in launching further attacks against a target system.
Solution / Fix
ScozBook Path Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ScozBook Path Disclosure Vulnerability
References:
References:
- ScozBook Homepage (ScozNet)
- ScozBook BETA 1.1 vulnerabilities ("euronymous"
)