Vulnerabilities > CVE-2005-3592 - Unspecified vulnerability in Cutephp Cutenews 1.3.6
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the application by triggering an error message, such as by entering multiple ../ (dot dot slash) in the archive parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |