Vulnerabilities > CVE-2005-2897 - Unspecified vulnerability in Stylemotion web News 1.4
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |