SecuritySpace - CVE-2005-1783

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2005-1783

Description: BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a search[string] parameter with a missing value or an incorrect submit[type] value, which reveals the path in the resulting error message. NOTE: it is not clear whether BookReview is available to the public. If not, then it should not be included in CVE.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2005-1783
http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html
http://www.osvdb.org/16880
http://www.osvdb.org/16881
http://secunia.com/advisories/1014058

CVE ID:	CVE-2005-1783
Description:	BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a search[string] parameter with a missing value or an incorrect submit[type] value, which reveals the path in the resulting error message. NOTE: it is not clear whether BookReview is available to the public. If not, then it should not be included in CVE.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1783 http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html http://www.osvdb.org/16880 http://www.osvdb.org/16881 http://secunia.com/advisories/1014058