CVEvulnerability
CVE-2003-1550
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message.
Affected configurations
• xoops xoops (<= 2.0)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://marc.info/?l=bugtraq&m=104820295115420&w=2 Exploit
- http://marc.info/?l=bugtraq&m=104887510828106&w=2 marc.info
- http://secunia.com/advisories/8353 Vendor Advisory
- http://www.security-corporation.com/index.php?id=advisories&a=011-FR www.security-corporation.com
- http://www.securityfocus.com/bid/7149 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11587 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=104820295115420&w=2 Exploit
- http://marc.info/?l=bugtraq&m=104887510828106&w=2 marc.info
- http://secunia.com/advisories/8353 Vendor Advisory
- http://www.security-corporation.com/index.php?id=advisories&a=011-FR www.security-corporation.com
- http://www.securityfocus.com/bid/7149 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11587 exchange.xforce.ibmcloud.com