CVE-2007-0259

Published: Jan 16, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message.

Affected (1)

Products: Ezboxx: Ezboxx Portal System

Ezboxx

1 product

Ezboxx Portal System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ezboxx Ezboxx Portal System	Up to beta_0.7.6

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://osvdb.org/32829

Source: cve@mitre.org

http://osvdb.org/33470

Source: cve@mitre.org

http://www.bugsec.com/articles.php?Security=20

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/456699/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0208

Source: cve@mitre.org

http://osvdb.org/32829