Vulnerability in Ciamos

CVE-2005-0827

Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which reveals the path in a PHP error message.

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

Ciamos — versions 0.9.2_rc1
E-xoops — versions 1.05_rev3
Runcms — versions 1.1a
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (URL Repurposed, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Patch, x_refsource_SECUNIA, third-party-advisory)