Unscored CVE-2005-0572 EUVD-2005-0573GHSA-pf6g-rp8x-w43x

index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module paramet…

Published Feb 27, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message.

References

phpwebsite-search-path-disclosure(19480) vdb-entry
GLSA-200503-04 vendor-advisory
http://neossecurity.net/Advisories/Advisory-05.txt
20050225 phpWebSite 0.10.0 Full Path disclosure mailing-list