CVE-2008-1717

2008-04-0921:00:00

mitre

www.cve.org

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

81.4%

JSON

WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found.

References

archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html

lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html

secunia.com/advisories/29719

www.securityfocus.com/archive/1/490560/100/0/threaded

www.securityfocus.com/archive/1/490782/100/0/threaded

www.securityfocus.com/bid/28678

exchange.xforce.ibmcloud.com/vulnerabilities/41713