CVE-2005-4722

CVE-2005-4722

EPSS 1.5%

_Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, which reveals the installation path in an error message.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://developer.tmsasia.com/page.cfm?name=security http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/25273 http://www.osvdb.org/23298