CVEvulnerability
CVE-2006-1332
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
Description
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message.
Affected configurations
• phpoutsourcing noahs classifieds (<= 1.3)
References
- http://securityreason.com/securityalert/471 securityreason.com
- http://securityreason.com/securityalert/605 securityreason.com
- http://www.securityfocus.com/archive/1/428157 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25331 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/471 securityreason.com
- http://securityreason.com/securityalert/605 securityreason.com
- http://www.securityfocus.com/archive/1/428157 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25331 exchange.xforce.ibmcloud.com