CVE-2005-4722

CVE-2005-4722

EPSS 1.5%

_Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, which reveals the installation path in an error message.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://developer.tmsasia.com/page.cfm?name=security http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/25273 http://www.osvdb.org/23298