Lucene search
MitreCVE-2001-1437HistoryApr 21, 2005 - 4:00 a.m.
CVE-2001-1437
2005-04-2104:00:00
mitre
web.nvd.nist.gov
27
cve-2001-1437
easyscripts
easynews 1.5
remote attack
web root path
php error message
script timeout
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.016
Percentile
87.5%
easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out.
Affected configurations
Node
easyscriptseasynewsRange≤1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| easyscripts | easynews | * | cpe:2.3:a:easyscripts:easynews:*:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.016
Percentile
87.5%
Related for CVE-2001-1437