CVE-2005-4722

CVE-2005-4722

EPSS 1.5%

_Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, which reveals the installation path in an error message.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://developer.tmsasia.com/page.cfm?name=security http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/25273 http://www.osvdb.org/23298