PT-2004-2508 · Coolphp · Coolphp

R00Tcr4Ck · Publicado 2004-10-16 · Atualizado 2017-07-11 · CVE-2004-1600

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CoolPHP version 1.0-stable

Description The issue allows remote attackers to gain sensitive information. This is achieved by providing an invalid op parameter, which results in the path being revealed in an error message.

Recommendations For CoolPHP version 1.0-stable, consider restricting access to the index.php file until a patch is available, or modify the error handling to prevent the disclosure of sensitive path information.

Exploit

Correção

Identificadores relacionados

CVE-2004-1600

Produtos afetados

Coolphp

Referências · 5

• 🔥 http://secunia.com/advisories/12850 · Exploit
• 🔥 http://securitytracker.com/id?1011748 · Exploit
• http://marc.info/?l=bugtraq&m=109810941419669&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17744 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1600 · Nota de Segurança