CVE-2003-1548

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-200

Description

MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message.

Affected products

Myabracadaweb: through 1.0.2

References

http://secunia.com/advisories/8320
http://securityreason.com/securityalert/3717
http://www.securityfocus.com/archive/1/315317/30/25460/threaded
http://www.securityfocus.com/bid/7126
http://www.securitytracker.com/id?1006308
https://exchange.xforce.ibmcloud.com/vulnerabilities/11556
http://secunia.com/advisories/8320
http://securityreason.com/securityalert/3717
http://www.securityfocus.com/archive/1/315317/30/25460/threaded
http://www.securityfocus.com/bid/7126
http://www.securitytracker.com/id?1006308
https://exchange.xforce.ibmcloud.com/vulnerabilities/11556

Get alerted when CVE-2003-1548 or the next vulnerability affects your stack