5
CVSSv2

CVE-2007-6271

Published: 07/12/2007 Updated: 15/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Absolute News Manager.NET 5.1 allows remote malicious users to obtain sensitive information via a direct request to getpath.aspx, which reveals the installation path in an error message.

Vulnerable Product Search on Vulmon Subscribe to Product

xigla absolute news manager.net 5.1

Exploits

source: wwwsecurityfocuscom/bid/26692/info Absolute News Manager NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary script code in the con ...