Unscored CVE-2007-0490 EUVD-2007-0488GHSA-cfpp-gxjg-55f8

index.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information (the full path) via an invalid listingID parameter i…

Published Jan 25, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

index.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information (the full path) via an invalid listingID parameter in a listingview action.

References

20070121 Full Path Disclosure in Open-Realty ( v2.3.4 ) mailing-list
openrealty-index-path-disclosure(31657) vdb-entry