CVE-2003-1242 Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message.
MediumCVSS 5.0
EPSS 6.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message.
Affected products
No affected product data has been published yet.
References
- 20030219 XSS and Path Disclosure in Sage exploit mailing-list vendor-advisory
- sage-module-path-disclosure(11372) vdb-entry
- 6893 exploit vdb-entry