← Database

CVE-2003-1089

MEDIUM CVSS: 5.0 Published: 2003-12-31 Modified: 2026-06-16

Description

index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.

Affected Platforms

Phpoutsourcing Zorum

Weakness Type

NVD-CWE-Other

References