Lucene search

K
cveMitreCVE-2007-0259
HistoryJan 16, 2007 - 11:28 p.m.

CVE-2007-0259

2007-01-1623:28:00
CWE-200
mitre
web.nvd.nist.gov
23
ezboxx
portal system
beta
0.7.6
vulnerability
remote attackers
sensitive information
invalid parameter
knowledgebase
nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.008

Percentile

82.2%

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message.

Affected configurations

Nvd
Node
ezboxxezboxx_portal_systemRangebeta_0.7.6
VendorProductVersionCPE
ezboxxezboxx_portal_system*cpe:2.3:a:ezboxx:ezboxx_portal_system:*:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.008

Percentile

82.2%

Related for CVE-2007-0259