CVE-2008-2681

MEDIUM 5.0CVE-2008-2681 · Published 12/06/2008 · updated 16/06/2026

In short

CVE-2008-2681 is a MEDIUM (CVSS 5.0) vulnerability affecting realm cms (realm project).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
realm cms realm_project	`≤ 2.3`	No fix yet

Description

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to _db/compact.asp, which reveals the database path in an error message.

References

bugreport.ir/index.php
secunia.com/advisories/30583 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/42956
exploit-db.com/exploits/5766

More vulnerabilities in realm cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free