Vulnerabilities > CVE-2003-1089 - Path Disclosure vulnerability in PHPoutsourcing Zorum 3.4

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
phpoutsourcing
exploit available
NVD
Published: 2003-12-31
Updated: 2017-07-11

Summary

index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.

Vulnerable Configurations

Part Description Count
Application
Phpoutsourcing
1

Exploit-Db

descriptionPHPOutsourcing Zorum 3.4 Path Disclosure Vulnerability. CVE-2003-1089. Webapps exploit for php platform
idEDB-ID:23018
last seen2016-02-02
modified2003-08-11
published2003-08-11
reporterZone-h Security Team
sourcehttps://www.exploit-db.com/download/23018/
titlePHPOutsourcing Zorum 3.4 Path Disclosure Vulnerability

References