CVE-2003-1550: Infoleak
Published Dec 31, 2003
·Updated
XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message.
Affected Software
1 affected component
Xoops Xoops<=2.0
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Mar 6, 2008
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1550?
CVE-2003-1550 is considered to have a moderate severity due to its ability to expose sensitive information.
2
How do I fix CVE-2003-1550?
To fix CVE-2003-1550, upgrade to a later version of XOOPS that addresses this vulnerability.
3
What does CVE-2003-1550 exploit?
CVE-2003-1550 exploits an invalid xoopsOption parameter revealing the installation path through error messages.
4
Is CVE-2003-1550 present in all versions of XOOPS?
CVE-2003-1550 affects XOOPS 2.0 and possibly earlier versions.
5
What kind of information is exposed by CVE-2003-1550?
CVE-2003-1550 can expose the installation path of the XOOPS application.