mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error messages, as demonstrated by the (1) mod and (2) cid parameters.
References
| Link | Resource |
|---|---|
| http://echo.or.id/adv/adv02-y3dips-2004.txt | Exploit Vendor Advisory |
| http://secunia.com/advisories/12231 | Vendor Advisory |
| http://securitytracker.com/id?1010864 | Vendor Advisory |
| http://www.securityfocus.com/archive/1/370855 | Exploit Vendor Advisory |
| http://www.securityfocus.com/bid/8507 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/13042 | |
| http://echo.or.id/adv/adv02-y3dips-2004.txt | Exploit Vendor Advisory |
| http://secunia.com/advisories/12231 | Vendor Advisory |
| http://securitytracker.com/id?1010864 | Vendor Advisory |
| http://www.securityfocus.com/archive/1/370855 | Exploit Vendor Advisory |
| http://www.securityfocus.com/bid/8507 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/13042 |
Configurations
History
20 Nov 2024, 23:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://echo.or.id/adv/adv02-y3dips-2004.txt - Exploit, Vendor Advisory | |
| References | () http://secunia.com/advisories/12231 - Vendor Advisory | |
| References | () http://securitytracker.com/id?1010864 - Vendor Advisory | |
| References | () http://www.securityfocus.com/archive/1/370855 - Exploit, Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/8507 - Exploit, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/13042 - |
Information
Published : 2004-12-31 05:00
Updated : 2024-11-20 23:53
NVD link : CVE-2004-2671
Mitre link : CVE-2004-2671
CVE.ORG link : CVE-2004-2671
JSON object : View
Products Affected
endonesia
- endonesia
CWE