Design/Logic Flaw

2007-02-1601:28:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.2%

JSON

Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file contents) via a “crafted URL.”

CPENameOperatorVersion
lifetypele1.1.5
lifetypeeq<= 1.2beta1

CPE	Name	Operator	Version
	lifetype	le	1.1.5
	lifetype	eq	<= 1.2beta1

References

osvdb.org/33210

secunia.com/advisories/24170

www.lifetype.net/blog/lifetype-development-journal/releases

www.securityfocus.com/bid/22572

www.vupen.com/english/advisories/2007/0616