Stellar Docs Path Disclosure Vulnerability
BID:8385
Info
Stellar Docs Path Disclosure Vulnerability
| Bugtraq ID: | 8385 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 11 2003 12:00AM |
| Updated: | Aug 11 2003 12:00AM |
| Credit: | Discovery is credited to G00db0y <[email protected]>. |
| Vulnerable: |
iMediaSoftware Stellar Docs 1.2 |
| Not Vulnerable: | |
Discussion
Stellar Docs Path Disclosure Vulnerability
Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system. It should be noted the error output indicates that a database function has failed, which may be due to a more serious issue, such as SQL injection.
Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system. It should be noted the error output indicates that a database function has failed, which may be due to a more serious issue, such as SQL injection.
References
Stellar Docs Path Disclosure Vulnerability
References:
References:
- Stellar Docs Homepage (iMediaSoftware)
- ZH2003-20SA (security advisory): Stellar Docs Path Disclosure and Security Leak (G00db0y