PT-2004-2935 · E107 · E107

Publicado 2004-05-29 · Atualizado 2017-07-11 · CVE-2004-2039

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions e107 version 0.615

Description The issue allows remote attackers to obtain sensitive information via a direct request to various files, including alt news.php, backend menu.php, clock menu.php, counter menu.php, login menu.php, and other files. These files reveal the full path in a PHP error message.

Recommendations For e107 version 0.615, consider restricting access to the mentioned files, such as alt news.php, backend menu.php, clock menu.php, counter menu.php, and login menu.php, to minimize the risk of exploitation. Additionally, ensure proper error handling is in place to prevent the disclosure of sensitive information.

Exploit

Correção

Identificadores relacionados

CVE-2004-2039

Produtos afetados

E107

Referências · 9

• 🔥 http://secunia.com/advisories/11740 · Exploit
• 🔥 http://osvdb.org/6525 · Exploit
• 🔥 http://waraxe.us/index.php?modname=sa&id=31 · Exploit
• http://securityfocus.com/bid/10436 · Nota
• http://marc.info/?l=full-disclosure&m=108586723116427&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2039 · Nota
• http://marc.info/?l=bugtraq&m=108588043007224&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16277 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2039 · Nota de Segurança