CVE-2003-0737: Medium severity phpWebSite phpWebSite vulnerability
Published Sep 4, 2003
·Updated
The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime() in TimeZone.php of the Pear library.
Affected Software
1 affected component
phpWebSite phpWebSite<=0.9.0
Event History
Sep 4, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Oct 20, 2003
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0737?
CVE-2003-0737 is considered a medium severity vulnerability due to its potential to disclose sensitive information.
2
How does CVE-2003-0737 affect phpWebSite?
CVE-2003-0737 allows remote attackers to obtain the full pathname of the phpWebSite installation through an invalid year input.
3
How do I fix CVE-2003-0737?
To fix CVE-2003-0737, upgrade phpWebSite to a version later than 0.9.0 that addresses this vulnerability.
4
What versions of phpWebSite are affected by CVE-2003-0737?
CVE-2003-0737 affects phpWebSite versions 0.9.x and earlier.
5
Can CVE-2003-0737 be exploited remotely?
Yes, CVE-2003-0737 can be exploited remotely by attackers who input an invalid year.