auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2005-03-07T05:00:00

Updated: 2016-10-17T13:57:01

Reserved: 2005-03-07T00:00:00


Link: CVE-2005-0655

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2005-05-02T04:00:00.000

Modified: 2016-10-18T03:13:32.133


Link: CVE-2005-0655

JSON object: View

cve-icon Redhat Information

No data.