← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2003-1242 · published 31 December 2003
CVE-2003-1242: Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent mo…
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message.
5.0 CVSS 2.0 Medium EPSS 6.8% · top 6.2%
5.0CVSS 2.0 base score
6.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
0Affected product versions listed by NVD
6References, 4 tagged exploit
16 Jun 2026Last modified by NVD
Description
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message.
AV:N/AC:L/Au:N/C:P/I:N/A:N
References
| Link | Tags |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2003-02/0236.html | ExploitVendor Advisory |
| http://www.iss.net/security_center/static/11372.php | |
| http://www.securityfocus.com/bid/6893 | Exploit |
| http://archives.neohapsis.com/archives/bugtraq/2003-02/0236.html | ExploitVendor Advisory |
| http://www.iss.net/security_center/static/11372.php | |
| http://www.securityfocus.com/bid/6893 | Exploit |
Track CVE-2003-1242 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Source: NIST National Vulnerability Database (record CVE-2003-1242), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
