Vulnerability Description
Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without required arguments to (1) adm_pages.php, (2) corr_pages.php, (3) del_block.php, (4) del_page.php, (5) footer.php, (6) home.php, and others.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zanfi Solutions | Zanfi Cms Lite | 1.1 |
References
- http://secunia.com/advisories/12792Vendor Advisory
- http://securitytracker.com/id?1011612
- http://www.osvdb.org/10677
- http://www.osvdb.org/10678
- http://www.osvdb.org/10679
- http://www.osvdb.org/10680
- http://www.osvdb.org/10681
- http://www.osvdb.org/10682
- http://www.securityfocus.com/archive/1/378053ExploitVendor Advisory
- http://www.zanfi.nl/index1.php?flag=cmslite
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17687
- http://secunia.com/advisories/12792Vendor Advisory
- http://securitytracker.com/id?1011612
- http://www.osvdb.org/10677
- http://www.osvdb.org/10678
FAQ
What is CVE-2004-2196?
CVE-2004-2196 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without required arguments to (1) adm_pages.php, (2) corr_pages.php, (3) del_block.php, (4) del...
How severe is CVE-2004-2196?
CVE-2004-2196 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-2196?
Check the references section above for vendor advisories and patch information. Affected products include: Zanfi Solutions Zanfi Cms Lite.