Unscored CVE-2007-2800 EUVD-2007-2792GHSA-vj5g-3v6m-vj2j

index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone…

Published Jun 28, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[], or (4) subject[] parameters, which reveals the installation path in the resulting error messages.

References

http://www.netvigilance.com/advisory0030
20070627 eTicket version 1.5.5 Path Disclosure mailing-list
eticket-index-path-disclosure(35122) vdb-entry
20070627 eTicket version 1.5.5 Path Disclosure Vulnerability mailing-list
34785 vdb-entry