VulnerabilityModified

CVE-2000-1240

Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path.

MEDIUM 5.0EPSS 1.21%

Does this matter?

Lower severity and a low EPSS score (1.21%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 1.21% probability · 67th percentile
CISA KEV: Not listed
Affected: anyportal php/anyportal php
Source: cve@mitre.org

References

http://www.osvdb.org/23983Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25441
http://www.osvdb.org/23983Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25441

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.