PT-2004-2508 · Coolphp · Coolphp

R00Tcr4Ck · Published 2004-10-16 · Updated 2017-07-11 · CVE-2004-1600

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CoolPHP version 1.0-stable

Description The issue allows remote attackers to gain sensitive information. This is achieved by providing an invalid op parameter, which results in the path being revealed in an error message.

Recommendations For CoolPHP version 1.0-stable, consider restricting access to the index.php file until a patch is available, or modify the error handling to prevent the disclosure of sensitive path information.

Exploit

Fix

Related Identifiers

CVE-2004-1600

Affected Products

Coolphp

References · 5

• 🔥 http://secunia.com/advisories/12850 · Exploit
• 🔥 http://securitytracker.com/id?1011748 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1600 · Security Note
• http://marc.info/?l=bugtraq&m=109810941419669&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17744 · Note