Vulnerability in Widget Press Property

CVE-2005-4017

property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message.

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

Affected products

Widget_press Widget_property — versions 1.1.19
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)