CVE-2003-1555

Published: Dec 31, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message.

Affected (1)

Products: Scoznet: Scozbook

Scoznet

1 product

Scozbook

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Scoznet Scozbook	Version 1.1_beta

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://secunia.com/advisories/8476

Source: cve@mitre.org

http://securityreason.com/securityalert/3781

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/316747/30/25280/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/7236

Source: cve@mitre.org

Exploit

http://www.securitytracker.com/id?1006413

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11659

Source: cve@mitre.org

http://secunia.com/advisories/8476