CVE-2008-6676 in QuickerSite

Sumário

de MITRE

QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 07/04/2009
• Divulgação: 08/04/2009
• Moderação: aceite
• Entrada: VDB-47618
• CPE: pronto
• CWE: CWE-20 (confirmado)
• Exploração: Descarregar
• CVSS: 5.0 (NVD)
• EPSS: 0.03036
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-6676
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-6676
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-6676/