CVE-2005-4722

2006-02-1511:00:00

mitre

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.7%

JSON

_Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, which reveals the installation path in an error message.

References

developer.tmsasia.com/page.cfm?name=security

metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt

www.osvdb.org/23298

exchange.xforce.ibmcloud.com/vulnerabilities/25273