CVE-2009-0678 images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the instal...
MediumCVSS 5.0
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ravenphpscripts ravennuke | = 2.30 | No fix listed |
References
- ravenphpscripts.com vendor-advisory
- 20090216 [waraxe-2009-SA#072] - Multiple Vulnerabilities in RavenNuke 2.3.0 mailing-list
- www.waraxe.us exploit
- ravennuke-captcha-info-disclosure(48792) vdb-entry
- 8068 exploit