CVE

Id
18151  
CVE No.
CVE-2006-2047  
Status
Candidate  
Description
Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allows remote attackers to obtain sensitive information via an invalid (1) secondary, (2) PageNum_Results, (3) category, or (4) keywords parameter in (a) Results.cfm; or an invalid (5) ProdID parameter in (b) Details.cfm; which reveal the path in various error messages. NOTE: the behavior for the category, keywords, and ProdID parameters might be resultant from SQL injection.  
Phase
Assigned (20060426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156287 18151 CVE-2006-2047 MISC:http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html  View
156288 18151 CVE-2006-2047 VUPEN:ADV-2006-1513  View
156289 18151 CVE-2006-2047 URL:http://www.vupen.com/english/advisories/2006/1513  View
156290 18151 CVE-2006-2047 OSVDB:24963  View
156291 18151 CVE-2006-2047 URL:http://www.osvdb.org/24963  View
156292 18151 CVE-2006-2047 OSVDB:24964  View
156293 18151 CVE-2006-2047 URL:http://www.osvdb.org/24964  View
156294 18151 CVE-2006-2047 SECUNIA:19812  View
156295 18151 CVE-2006-2047 URL:http://secunia.com/advisories/19812  View
156296 18151 CVE-2006-2047 XF:cartweaver-multiple-path-disclosure(26061)  View

Related JVN