CVE-2008-2864

Published: Jun 25, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/, which reveals the database path.

Affected (2)

Products: Elinestudio: Site Composer

Elinestudio

1 product

Site Composer

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Elinestudio Site Composer	Up to 2.6
Elinestudio Site Composer	Version 2.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://securityreason.com/securityalert/3957

Source: cve@mitre.org

http://www.bugreport.ir/?/45

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/493473/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43192

Source: cve@mitre.org

https://www.exploit-db.com/exploits/5859

Source: cve@mitre.org

http://securityreason.com/securityalert/3957