PT-2002-1662 · Php · Php-Survey

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0614

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP-Survey versions 20000615 and earlier

Description The issue allows remote attackers to obtain sensitive information, including database credentials, because the global.inc file is stored under the web root and .inc files are not preprocessed by the server.

Recommendations For versions 20000615 and earlier, consider moving the global.inc file outside of the web root or configuring the server to preprocess .inc files to prevent remote access to sensitive information.

Correção

Identificadores relacionados

CVE-2002-0614

Produtos afetados

Php-Survey

Referências · 4

• http://securityfocus.com/bid/4612 · Aviso do Fabricante
• http://iss.net/security_center/static/8950.php · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0383.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0614 · Nota de Segurança