CVE-2008-6528

Published: Mar 26, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.

Affected (1)

Products: Tmaxsoft: Jeus

Tmaxsoft

1 product

Jeus

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tmaxsoft Jeus	Version 5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://secunia.com/advisories/33123

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/499235/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/499236/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/32804

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/47303

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7442

Source: cve@mitre.org

http://secunia.com/advisories/33123