CVE-2006-6267 - PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop parameter, which reveals the path in an error message

Back Back to CVE browser

HIGH

PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop parameter, which reveals the path in an error message

Published Dec 4, 2006

7.8

HIGH

CVSS 2.0

EPSS 1.40%

Description

PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop parameter, which reveals the path in an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/archive/1/452283/100/100/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6250
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30474
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.securityfocus.com/archive/1/452283/100/100/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6250		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30474		vdb-entryx_refsource_XF