Vulnerabilities > CVE-2007-0490 - Information Disclosure vulnerability in Open-Realty 2.3.4

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
open-realty

Summary

index.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information (the full path) via an invalid listingID parameter in a listingview action.

Vulnerable Configurations

Part Description Count
Application
Open-Realty
1