VulnerabilityModified
CVE-2006-1332
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message.
MEDIUM 6.4EPSS 1.63%
Does this matter?
Lower severity and a low EPSS score (1.63%). Track it; it rarely justifies an emergency change on its own.
Description
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
- EPSS
- 1.63% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- phpoutsourcing/noahs classifieds
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/471
- http://securityreason.com/securityalert/605
- http://www.securityfocus.com/archive/1/428157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25331
- http://securityreason.com/securityalert/471
- http://securityreason.com/securityalert/605
- http://www.securityfocus.com/archive/1/428157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25331
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.