CVE-2005-2897

WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error…

published September 14, 2005

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01181 · 67.3th percentile
Published
2005-09-14T04:00Z
EPSS history
Timeline
  • 14 SEP 04:00Z
    WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error…
    cvelistv5