CVE-2003-1548

Published: Dec 31, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message.

Affected (1)

Products: Myabracadaweb: Myabracadaweb

Myabracadaweb

1 product

Myabracadaweb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Myabracadaweb Myabracadaweb	Up to 1.0.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://secunia.com/advisories/8320

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/3717

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/315317/30/25460/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/7126

Source: cve@mitre.org

Exploit

http://www.securitytracker.com/id?1006308

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/11556

Source: cve@mitre.org

http://secunia.com/advisories/8320