Unscored CVE-2007-5119 EUVD-2007-5100GHSA-fh9q-jmr7-726h

JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version …

Published Sep 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version parameter to the default URI under attach/Main/.

References

jspwiki-version-information-disclosure(36768) vdb-entry
20070925 JSPWiki Multiple Vulnerabilities mailing-list
http://www.ecyrd.com/~jalkanen/JSPWiki/2.4.104/ChangeLog
3167 third-party-advisory
20070924 JSPWiki Multiple Input Validation Vulnerabilities mailing-list
26961 third-party-advisory