CVE-2011-1666 Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv.php, or (3) Calendar/Model/Attender.php, which reveal the fu...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv.php, or (3) Calendar/Model/Attender.php, which reveal the full installation path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| metaways tine | = 2.0 | No fix listed |
References
- 8191 third-party-advisory
- www.htbridge.ch exploit
- 20110331 HTB22909: Path disclosure in Tine 2.0 mailing-list
- 47102 vdb-entry
- tine-multiple-info-disc(66558) vdb-entry