6.6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.3%
WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.
archives.neohapsis.com/archives/bugtraq/2002-04/0207.html
www.iss.net/security_center/static/8865.php
www.ngssoftware.com/advisories/wtr.txt
www.osvdb.org/10447