5
CVSSv2

CVE-2008-2681

Published: 12/06/2008 Updated: 29/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Realm CMS 2.3 and previous versions allows remote malicious users to obtain sensitive information via a direct request to _db/compact.asp, which reveals the database path in an error message.

Vulnerable Product Search on Vulmon Subscribe to Product

realm project realm cms

Exploits

########################## wwwBugReportir ####################################### # # AmnPardaz Security Research Team # # Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access # Vendor: wwwrealmprojectcom # Vulnerable Version: 23 and prior versions # Exploit: Available # Impact: High # Fix: N/A # Original Advisory: bug ...