CVE

Id
31834  
CVE No.
CVE-2008-1717  
Status
Candidate  
Description
WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found.  
Phase
Assigned (20080409)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
342748 31834 CVE-2008-1717 BUGTRAQ:20080407 WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability  View
342749 31834 CVE-2008-1717 URL:http://www.securityfocus.com/archive/1/archive/1/490560/100/0/threaded  View
342750 31834 CVE-2008-1717 BUGTRAQ:20080412 Re: WoltLab(R) Community Framework WCF 1.0.6  View
342751 31834 CVE-2008-1717 URL:http://www.securityfocus.com/archive/1/archive/1/490782/100/0/threaded  View
342752 31834 CVE-2008-1717 FULLDISC:20080408 WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability  View
342753 31834 CVE-2008-1717 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html  View
342754 31834 CVE-2008-1717 FULLDISC:20080407 WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability  View
342755 31834 CVE-2008-1717 URL:http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html  View
342756 31834 CVE-2008-1717 BID:28678  View
342757 31834 CVE-2008-1717 URL:http://www.securityfocus.com/bid/28678  View
342758 31834 CVE-2008-1717 SECUNIA:29719  View
342759 31834 CVE-2008-1717 URL:http://secunia.com/advisories/29719  View
342760 31834 CVE-2008-1717 XF:wbb-wcf-exception-info-disclosure(41713)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46982 JVNDB-2008-002292 Python の zlib 拡張モジュールにおける任意のコードを実行される脆弱性 Python の zlib 拡張モジュールには、負の整数の処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-1721 31834 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002292.html  View