CVE-2008-6676

EPSS 3.0%

QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/5733unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/46222 http://secunia.com/advisories/30501 https://exchange.xforce.ibmcloud.com/vulnerabilities/42861 http://www.bugreport.ir/39/exploit.htm http://www.bugreport.ir/index_39.htm http://www.securityfocus.com/bid/29524