Vulnerability Description
mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error messages, as demonstrated by the (1) mod and (2) cid parameters.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Endonesia | Endonesia | 8.3 |
References
- http://echo.or.id/adv/adv02-y3dips-2004.txtExploitVendor Advisory
- http://secunia.com/advisories/12231Vendor Advisory
- http://securitytracker.com/id?1010864Vendor Advisory
- http://www.securityfocus.com/archive/1/370855ExploitVendor Advisory
- http://www.securityfocus.com/bid/8507ExploitVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13042
- http://echo.or.id/adv/adv02-y3dips-2004.txtExploitVendor Advisory
- http://secunia.com/advisories/12231Vendor Advisory
- http://securitytracker.com/id?1010864Vendor Advisory
- http://www.securityfocus.com/archive/1/370855ExploitVendor Advisory
- http://www.securityfocus.com/bid/8507ExploitVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13042
FAQ
What is CVE-2004-2671?
CVE-2004-2671 is a vulnerability with a CVSS score of 5.0 (MEDIUM). mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error...
How severe is CVE-2004-2671?
CVE-2004-2671 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-2671?
Check the references section above for vendor advisories and patch information. Affected products include: Endonesia Endonesia.