CVE-2005-2897 | BDVDB-2026-12463 Detail

Description#

WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12005-09-14Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.