CWE-200 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-200/ Sun, 26 Feb 2023 09:11:57 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-200 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-200/ 32 32 CVE-2008-7268 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7268/ Sun, 26 Feb 2023 09:11:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7268/ The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php.

The post CVE-2008-7268 appeared first on CVE Vulnerability.

]]> The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php.

The post CVE-2008-7268 appeared first on CVE Vulnerability.

]]> CVE-2008-7281 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7281/ Sun, 26 Feb 2023 09:11:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7281/ Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-mail address information by reading this field.

The post CVE-2008-7281 appeared first on CVE Vulnerability.

]]> Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-mail address information by reading this field.

The post CVE-2008-7281 appeared first on CVE Vulnerability.

]]> CVE-2008-7292 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7292/ Sun, 26 Feb 2023 09:11:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7292/ Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

The post CVE-2008-7292 appeared first on CVE Vulnerability.

]]> Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

The post CVE-2008-7292 appeared first on CVE Vulnerability.

]]> CVE-2008-7187 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7187/ Sun, 26 Feb 2023 09:11:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7187/ Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message.

The post CVE-2008-7187 appeared first on CVE Vulnerability.

]]> Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message.

The post CVE-2008-7187 appeared first on CVE Vulnerability.

]]> CVE-2008-7143 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7143/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7143/ phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread containing a URL to a remotely hosted image, which might include the session ID in the Referer header.

The post CVE-2008-7143 appeared first on CVE Vulnerability.

]]> phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread containing a URL to a remotely hosted image, which might include the session ID in the Referer header.

The post CVE-2008-7143 appeared first on CVE Vulnerability.

]]> CVE-2008-7146 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7146/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7146/ IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to (1) Knowledge_Impact_Course.htm, (2) LRN-formatted_Course.htm, or (3) Create_Course.htm in help/1/Instructor/, which reveals the installation path in an error message.

The post CVE-2008-7146 appeared first on CVE Vulnerability.

]]> IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to (1) Knowledge_Impact_Course.htm, (2) LRN-formatted_Course.htm, or (3) Create_Course.htm in help/1/Instructor/, which reveals the installation path in an error message.

The post CVE-2008-7146 appeared first on CVE Vulnerability.

]]> CVE-2008-7154 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7154/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7154/ Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf_fw.php, (2) class.module/class.event_manager.php, (3) lib/lib.domxml5.php, or (4) menu/menu_over.php in doceboCore/; or (5) class/class.conf_cms.php, (6) lib/lib.compose.php, (7) modules/chat/teleskill.php, or (8) class/class.admin_menu_cms.php in doceboCms/; which reveals the installation path in an error message.

The post CVE-2008-7154 appeared first on CVE Vulnerability.

]]> Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf_fw.php, (2) class.module/class.event_manager.php, (3) lib/lib.domxml5.php, or (4) menu/menu_over.php in doceboCore/; or (5) class/class.conf_cms.php, (6) lib/lib.compose.php, (7) modules/chat/teleskill.php, or (8) class/class.admin_menu_cms.php in doceboCms/; which reveals the installation path in an error message.

The post CVE-2008-7154 appeared first on CVE Vulnerability.

]]> CVE-2008-7063 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7063/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7063/ Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

The post CVE-2008-7063 appeared first on CVE Vulnerability.

]]> Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

The post CVE-2008-7063 appeared first on CVE Vulnerability.

]]> CVE-2008-7069 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7069/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7069/ All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat.

The post CVE-2008-7069 appeared first on CVE Vulnerability.

]]> All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat.

The post CVE-2008-7069 appeared first on CVE Vulnerability.

]]> CVE-2008-6999 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6999/ Sun, 26 Feb 2023 09:11:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6999/ phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

The post CVE-2008-6999 appeared first on CVE Vulnerability.

]]> phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

The post CVE-2008-6999 appeared first on CVE Vulnerability.

]]>