CVE-2005-4320

Published: Dec 17, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc.php, (2) element.inc.php, and (3) node.inc.php, which leaks the path in an error message.

Affected (1)

Products: Limbo Cms: Limbo Cms

Limbo Cms

1 product

Limbo Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Limbo Cms Limbo Cms	Up to 1.0.4.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (16)

http://rgod.altervista.org/limbo1042_xpl.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/18063/

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015364

Source: cve@mitre.org

Exploit

http://www.osvdb.org/21757

Source: cve@mitre.org

http://www.osvdb.org/21758

Source: cve@mitre.org

http://www.osvdb.org/21759

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/419470/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2932

Source: cve@mitre.org

Vendor Advisory

http://rgod.altervista.org/limbo1042_xpl.html