CVE-2003-1409 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 2.5% (pctl 84)
Patch early
A public exploit exists.
Description
TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2) out.php, which reveals the path to the TOPo directory in the error message.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| EPSS | 2.5% — more likely to be exploited than 84% of all CVEs |
| Weakness | CWE-200 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2003-12-31 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| ej3 | topo |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | TOPO 1.41 - Full Path Disclosure | 2003-02-04 |
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0049.html
- http://secunia.com/advisories/8008
- http://www.securityfocus.com/bid/6768
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11248
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0049.html
- http://secunia.com/advisories/8008
- http://www.securityfocus.com/bid/6768
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11248
→ the Explorer · watch your stack · NVD