CVE-2013-3597

Searchblox < 7.5 - Information Disclosure

Title source: rule
STIX 2.1

Description

servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Ricky Roane Jr · textwebappsjava
https://www.exploit-db.com/exploits/38739

References (3)

Core 3
Core References
Various Sources x_refsource_misc
http://buddhalabs.com/Advisories/WebAdvisories.html
Various Sources x_refsource_confirm
http://www.searchblox.com/developers-2/change-log
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/592942

Scores

EPSS 0.3840
EPSS Percentile 97.3%

Details

CWE
CWE-200
Status published
Products (9)
searchblox/searchblox 6.2 build_1
searchblox/searchblox 6.3 build_1
searchblox/searchblox 6.4 build_1 (2 CPE variants)
searchblox/searchblox 7.0
searchblox/searchblox 7.1
searchblox/searchblox 7.2
searchblox/searchblox 7.3
searchblox/searchblox 7.4
searchblox/searchblox < 7.5
Published Aug 28, 2013
Tracked Since Feb 18, 2026