NuytsTech Security

CVE-2004-2748

by ·

viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.

Date published : 2007-11-08

http://www.securityfocus.com/bid/9460

http://www.securityfocus.com/archive/1/350419/30/21610/threaded

Tags: