3 matches found
CVE-2003-1242
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message...
CVE-2003-1243
Sage 1.0 b3 is affected by a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML or web script via the mod parameter. The issue is described without explicit exploit details or patched versions in the provided material; the CVSS indicates low-medium impa...
CVE-2003-1242
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message...