CVE-2008-0199

Published: Jan 10, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show_page and time parameters to the default URI.

Affected (1)

Products: Pro Search: Pro Search

Pro Search

1 product

Pro Search

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pro Search Pro Search	Up to 0.16

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html

Source: cve@mitre.org

Exploit

http://securityreason.com/securityalert/3539

Source: cve@mitre.org

http://securityvulns.ru/Sdocument731.html

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797

Source: cve@mitre.org

http://websecurity.com.ua/1259/

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485786/100/0/threaded

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html