Lucene search
MitreCVE-2010-2859HistoryJul 25, 2010 - 2:04 a.m.
CVE-2010-2859
2010-07-2502:04:14
CWE-200
mitre
web.nvd.nist.gov
22
cve-2010-2859
simpnews
news.php
vulnerability
remote attackers
sensitive information
installation path
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.003
Percentile
71.4%
news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message.
Affected configurations
Node
boesch-itsimpnewsRange≤2.47.03
ORboesch-itsimpnewsMatch2.0.1
ORboesch-itsimpnewsMatch2.13
ORboesch-itsimpnewsMatch2.30
ORboesch-itsimpnewsMatch2.30.2
ORboesch-itsimpnewsMatch2.30.6
ORboesch-itsimpnewsMatch2.31.0
ORboesch-itsimpnewsMatch2.32.0
ORboesch-itsimpnewsMatch2.32.1
ORboesch-itsimpnewsMatch2.33.0
ORboesch-itsimpnewsMatch2.33.01
ORboesch-itsimpnewsMatch2.34
ORboesch-itsimpnewsMatch2.34.0
ORboesch-itsimpnewsMatch2.34.01
ORboesch-itsimpnewsMatch2.35.00
ORboesch-itsimpnewsMatch2.36.00
ORboesch-itsimpnewsMatch2.37.00
ORboesch-itsimpnewsMatch2.37.01
ORboesch-itsimpnewsMatch2.37.02
ORboesch-itsimpnewsMatch2.38
ORboesch-itsimpnewsMatch2.38.02
ORboesch-itsimpnewsMatch2.38.03
ORboesch-itsimpnewsMatch2.38.04
ORboesch-itsimpnewsMatch2.39.0
ORboesch-itsimpnewsMatch2.40.01
ORboesch-itsimpnewsMatch2.41.0
ORboesch-itsimpnewsMatch2.41.02
ORboesch-itsimpnewsMatch2.41.03
ORboesch-itsimpnewsMatch2.42.0
ORboesch-itsimpnewsMatch2.42.01
ORboesch-itsimpnewsMatch2.44.00
ORboesch-itsimpnewsMatch2.47.00
| Vendor | Product | Version | CPE |
|---|---|---|---|
| boesch-it | simpnews | * | cpe:2.3:a:boesch-it:simpnews:*:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.0.1 | cpe:2.3:a:boesch-it:simpnews:2.0.1:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.13 | cpe:2.3:a:boesch-it:simpnews:2.13:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.30 | cpe:2.3:a:boesch-it:simpnews:2.30:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.30.2 | cpe:2.3:a:boesch-it:simpnews:2.30.2:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.30.6 | cpe:2.3:a:boesch-it:simpnews:2.30.6:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.31.0 | cpe:2.3:a:boesch-it:simpnews:2.31.0:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.32.0 | cpe:2.3:a:boesch-it:simpnews:2.32.0:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.32.1 | cpe:2.3:a:boesch-it:simpnews:2.32.1:*:*:*:*:*:*:* |
| boesch-it | simpnews | 2.33.0 | cpe:2.3:a:boesch-it:simpnews:2.33.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2010-2859
2010-07-25 02:04:14
prion
prion
Design/Logic Flaw
2010-07-25 02:04:00
cvelist
cvelist
CVE-2010-2859
2010-07-23 20:00:00
openvas
openvas
SimpNews Multiple Vulnerabilities
2010-08-02 00:00:00
SimpNews Multiple Vulnerabilities
2010-08-02 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.003
Percentile
71.4%
Related for CVE-2010-2859