Description
slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error message.
References
- 12883 third-party-advisory
- 20041018 Multiple vulnerabilities in Sage Saleslogix mailing-list
- 10944 vdb-entry
- 1011769 vdb-entry
- saleslogix-filename-path-disclosure(17751) vdb-entry
- 11450 vdb-entry
- 20041018 Multiple vulnerabilities in Sage Saleslogix mailing-list