CVE-2003-1555

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-200

Description

ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message.

Affected products

Scoznet Scozbook: 1.1_beta

References

http://secunia.com/advisories/8476
http://securityreason.com/securityalert/3781
http://www.securityfocus.com/archive/1/316747/30/25280/threaded
http://www.securityfocus.com/bid/7236
http://www.securitytracker.com/id?1006413
https://exchange.xforce.ibmcloud.com/vulnerabilities/11659
http://secunia.com/advisories/8476
http://securityreason.com/securityalert/3781
http://www.securityfocus.com/archive/1/316747/30/25280/threaded
http://www.securityfocus.com/bid/7236
http://www.securitytracker.com/id?1006413
https://exchange.xforce.ibmcloud.com/vulnerabilities/11659

Get alerted when CVE-2003-1555 or the next vulnerability affects your stack