Path Disclosure Vulnerability in eNdonesia 8.2
CVE-2003-1316

Currently unrated

Key Information:

Vendor: eNdonesia
Status: eNdonesia
Vendor: CVE Published:; 31 December 2003

What is CVE-2003-1316?

The vulnerability in mod.php of eNdonesia 8.2 enables remote attackers to exploit the 'lng' parameter. By injecting a quote character, an attacker can trigger the application to reveal sensitive information, specifically the file path in the response error messages. This unintended disclosure of application paths can lead to further attacks on the system, as it provides attackers with critical insights into the application's structure and file locations.

References

http://secunia.com/advisories/9622

third-party-advisoryx_refsource_SECUNIA

http://securitytracker.com/id?1007592

vdb-entryx_refsource_SECTRACK

http://www.osvdb.org/3666

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Jan 4, 2007
Vulnerability published
Dec 31, 2003

CVE-2003-1316 Data

JSON