PT-2004-3608 · Phpmychat · Phpmychat

Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-2718

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHPMyChat version 0.14.5

Description The issue allows attackers to obtain sensitive information, including database passwords, by directly requesting the setup.php3 file, which is not removed or protected after installation.

Recommendations For PHPMyChat version 0.14.5, remove or protect the setup.php3 file after installation to prevent unauthorized access.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2004-2718

Produtos afetados

Phpmychat

Referências · 4

• 🔥 https://exploit-db.com/exploits/703 · Exploit
• http://secunia.com/advisories/11894 · Aviso do Fabricante
• http://securiteam.com/unixfocus/6D00S0KC0S.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2718 · Nota de Segurança