CVE Database
/

CVE-2003-1242

Back to search

CVE-2003-1242

Published: Nov 16, 2005

Modified: Sep 17, 2024

PUBLISHED

Description

Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message.

VendorProductVersions

n/a

n/a

affected
n/a

References

sage-module-path-disclosure(11372)
vdb-entry
x_refsource_XF
20030219 XSS and Path Disclosure in Sage
mailing-list
x_refsource_BUGTRAQ
6893
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now