Unscored CVE-2006-4752 EUVD-2006-4739GHSA-fp5w-q8fw-rcp5

Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine modu…

Published Sep 13, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter.

References

ADV-2006-3560 vdb-entry
xhpcms-action-path-disclosure(28862) vdb-entry
20060911 XHP CMS v0.5.1 Vuls Xss and Full path vuls mailing-list
21877 third-party-advisory
1016823 vdb-entry
1565 third-party-advisory