Vulnerability Details CVE-2008-6676
QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://osvdb.org/46222
- http://secunia.com/advisories/30501
- http://www.bugreport.ir/39/exploit.htm
- http://www.bugreport.ir/index_39.htm
- http://www.securityfocus.com/bid/29524
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42861
- http://osvdb.org/46222
- http://secunia.com/advisories/30501
- http://www.bugreport.ir/39/exploit.htm
- http://www.bugreport.ir/index_39.htm
- http://www.securityfocus.com/bid/29524
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42861
Products affected by CVE-2008-6676
-
cpe:2.3:a:quickersite:quickersite:1.8.5