Lucene search

MitreCVE-2003-1555

HistoryMar 26, 2008 - 5:00 p.m.

CVE-2003-1555

2008-03-2617:00:00

CWE-200

mitre

web.nvd.nist.gov

cve-2003-1555

scoznet

scozbook

remote attackers

sensitive information

view.php

installation path

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.016

Percentile

87.7%

JSON

ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message.

Affected configurations

Nvd

Node

scoznetscozbookMatch1.1_beta

VendorProductVersionCPE
scoznetscozbook1.1_betacpe:2.3:a:scoznet:scozbook:1.1_beta:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
scoznet	scozbook	1.1_beta	cpe:2.3:a:scoznet:scozbook:1.1_beta:::::::*

References

secunia.com/advisories/8476

securityreason.com/securityalert/3781

www.securityfocus.com/archive/1/316747/30/25280/threaded

www.securityfocus.com/bid/7236

www.securitytracker.com/id?1006413

exchange.xforce.ibmcloud.com/vulnerabilities/11659

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.016

Percentile

87.7%

JSON

Related for CVE-2003-1555