Unscored CVE-2004-1205 EUVD-2004-1202GHSA-pjj6-9m5j-mh7w

codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, wh…

Published Dec 15, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message.

References

20041126 PnTresMailer code browser 6.03 Vulnerabilities mailing-list
pntresmailer-information-disclosure(18263) vdb-entry