- Description
- categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.
- Source
- cve@mitre.org
- NVD status
- Analyzed
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:black_tie_project:black_tie_project:0.4b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C3531DB-98B0-4B7F-9B5F-4DC19B2A6516"
},
{
"criteria": "cpe:2.3:a:black_tie_project:black_tie_project:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61A21551-F263-4272-8B38-6E27F90DEE08"
},
{
"criteria": "cpe:2.3:a:black_tie_project:black_tie_project:0.5b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C58DADB1-DC13-42BF-9F5F-98AD0FAD3A08"
}
],
"operator": "OR"
}
]
}
]