CVE-2013-3597

SearchBlox < 7.5 - Exposure of Sensitive Information via CollectionListServlet

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-3597. PoCs published by Ricky Roane Jr.

AI-analyzed exploit summary The provided text describes an information disclosure vulnerability in SearchBlox 7.4 Build 1, where attackers can retrieve sensitive information via a specific URL endpoint. No actual exploit code is present, only a description and example URL.

Description

servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Ricky Roane Jr · textwebappsjava
https://www.exploit-db.com/exploits/38739

The provided text describes an information disclosure vulnerability in SearchBlox 7.4 Build 1, where attackers can retrieve sensitive information via a specific URL endpoint. No actual exploit code is present, only a description and example URL.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: SearchBlox 7.4 Build 1
No auth needed
Prerequisites: Network access to the target system
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Various Sources x_refsource_misc
http://buddhalabs.com/Advisories/WebAdvisories.html
Various Sources x_refsource_confirm
http://www.searchblox.com/developers-2/change-log
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/592942

Scores

EPSS 0.0848
EPSS Percentile 94.4%

Details

CWE
CWE-200
Status published
Products (9)
searchblox/searchblox 6.2 build_1
searchblox/searchblox 6.3 build_1
searchblox/searchblox 6.4 build_1 (2 CPE variants)
searchblox/searchblox 7.0
searchblox/searchblox 7.1
searchblox/searchblox 7.2
searchblox/searchblox 7.3
searchblox/searchblox 7.4
searchblox/searchblox < 7.5
Published Aug 28, 2013
Tracked Since Feb 18, 2026