Security Advisory

CVE-2008-0736

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-02-13 00:00:00
Last updated 2024-08-07 07:54:23
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attackers to obtain the path via a certain value of the FedExAccount parameter.