Vulnerability Details CVE-2008-7146
IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to (1) Knowledge_Impact_Course.htm, (2) LRN-formatted_Course.htm, or (3) Create_Course.htm in help/1/Instructor/, which reveals the installation path in an error message.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.0%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2008-7146
-
cpe:2.3:a:intralearn:intralearn:*
-
cpe:2.3:a:intralearn:intralearn:2.1