CVE-2002-1723

Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a non-existent username to profiles.php, which displays the full path in the error message.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-08-08

Affected products

• Powerboards (Powerboards)

References

• http://online.securityfocus.com/archive/82/266665
• http://www.ifrance.com/kitetoua/tuto/powerboards.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8824