CVE

Id
12989  
CVE No.
CVE-2005-1783  
Status
Candidate  
Description
BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a search[string] parameter with a missing value or an incorrect submit[type] value, which reveals the path in the resulting error message. NOTE: it is not clear whether BookReview is available to the public. If not, then it should not be included in CVE.  
Phase
Assigned (20050531)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
93584 12989 CVE-2005-1783 MISC:http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html  View
93585 12989 CVE-2005-1783 OSVDB:16881  View
93586 12989 CVE-2005-1783 URL:http://www.osvdb.org/16881  View
93587 12989 CVE-2005-1783 OSVDB:16880  View
93588 12989 CVE-2005-1783 URL:http://www.osvdb.org/16880  View
93589 12989 CVE-2005-1783 SECUNIA:1014058  View

Related JVN