Sage 1.0 beta 3 Content Management System Path Disclosure Vulnerability

2003-02-20T00:00:00
ID EDB-ID:22269
Type exploitdb
Reporter euronymous
Modified 2003-02-20T00:00:00

Description

Sage 1.0 beta 3 Content Management System Path Disclosure Vulnerability. CVE-2003-1242. Remote exploit for windows platform

                                        
                                            source: http://www.securityfocus.com/bid/6893/info

Sage Content Management System contains a path disclosure vulnerability. When a request is made for a module that does not exist, the returned error message contains the full path to the Sage installation directory.

Disclosed path information could be used to launch further attacks against the system. 

http://hostname/?mod=some_thing&op=browse

http://hostname/?mod=node&nid=some_thing&op=view