Lucene search
HistoryJun 18, 2009 - 9:30 p.m.
CVE-2009-2115
cve-2009-2115
skybluecanvas
admin.php
sensitive information disclosure
invalid id parameter
nvd
6.5 Medium
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:C/I:N/A:N
0.002 Low
EPSS
Percentile
51.0%
admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message.
| CPE | Name | Operator | Version |
|---|---|---|---|
| skybluecanvas:skybluecanvas | skybluecanvas | eq | 1.1 |
6.5 Medium
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:C/I:N/A:N
0.002 Low
EPSS
Percentile
51.0%
Related for CVE-2009-2115