CVE-2011-1666

Published: Apr 10, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv.php, or (3) Calendar/Model/Attender.php, which reveal the full installation path.

Affected (1)

Products: Metaways: Tine

Metaways

1 product

Tine

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Metaways Tine	Version 2.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://securityreason.com/securityalert/8191

Source: cve@mitre.org

http://www.htbridge.ch/advisory/path_disclosure_in_tine_2_0.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/517269/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/47102

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/66558

Source: cve@mitre.org

http://securityreason.com/securityalert/8191