PT-2003-2133 · Unknown · Advanced Poll

Publicado 2003-10-25 · Atualizado 2017-07-11 · CVE-2003-1181

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Advanced Poll version 2.0.2

Description The issue allows remote attackers to obtain sensitive information via an HTTP request to "info.php", which invokes the phpinfo() function.

Recommendations For Advanced Poll version 2.0.2, consider restricting access to the "info.php" file to prevent unauthorized disclosure of sensitive information. As a temporary workaround, remove or disable the phpinfo() function invocation in "info.php" until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2003-1181

Produtos afetados

Advanced Poll

Referências · 8

• 🔥 http://securityfocus.com/archive/1/342493 · Exploit
• 🔥 https://exploit-db.com/exploits/22412 · Exploit
• 🔥 http://securityfocus.com/bid/8890 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13515 · Nota
• http://osvdb.org/3292 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0019.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1181 · Nota de Segurança
• http://secunia.com/advisories/10068 · Aviso do Fabricante