Vulnerabilities > CVE-2003-1089 - Unspecified vulnerability in PHPoutsourcing Zorum 3.4

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
phpoutsourcing
exploit available
NVD
Published: 2003-12-31
Updated: 2024-11-20

Summary

index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.

Vulnerable Configurations

Part Description Count
Application
Phpoutsourcing
1

Exploit-Db

descriptionPHPOutsourcing Zorum 3.4 Path Disclosure Vulnerability. CVE-2003-1089. Webapps exploit for php platform
idEDB-ID:23018
last seen2016-02-02
modified2003-08-11
published2003-08-11
reporterZone-h Security Team
sourcehttps://www.exploit-db.com/download/23018/
titlePHPOutsourcing Zorum 3.4 Path Disclosure Vulnerability

References