CVE-2003-1550 XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message.
MediumCVSS 5.0
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xoops | <= 2.0 | No fix listed |
References
- 20030320 [SCSA-011] Path Disclosure Vulnerability in XOOPS exploit mailing-list
- 20030328 Re: [SCSA-011] Path Disclosure Vulnerability in XOOPS mailing-list
- 8353 third-party-advisory vendor-advisory
- www.security-corporation.com
- 7149 exploit vdb-entry
- xoops-xoopsoption-path-disclosure(11587) vdb-entry