Lucene search

MitreCVE-2008-0136

HistoryJan 08, 2008 - 7:46 p.m.

CVE-2008-0136

2008-01-0819:46:00

CWE-200

mitre

web.nvd.nist.gov

snitz forums

information disclosure

vulnerability

cve-2008-0136

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.005

Percentile

76.1%

JSON

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path.

Affected configurations

Nvd

Node

snitz_communicationssnitz_forums_2000Match3.4.05

VendorProductVersionCPE
snitz_communicationssnitz_forums_20003.4.05cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
snitz_communications	snitz_forums_2000	3.4.05	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:::::::*

References

hackerscenter.com/archive/view.asp?id=28145

www.packetstormsecurity.org/0801-exploits/snitz-multi.txt

www.securityfocus.com/archive/1/485836/100/200/threaded

www.securityfocus.com/archive/1/485894/100/200/threaded

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.005

Percentile

76.1%

JSON

Related for CVE-2008-0136