CVEvulnerability
CVE-2002-0614
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-06-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server.
Affected configurations
• php-survey php-survey 2000-04-20
• php-survey php-survey 2000-04-21
• php-survey php-survey 2000-06-14
• php-survey php-survey 2000-06-14b
• php-survey php-survey 2000-06-15
• php-survey php-survey prebeta2000-03-27
Related
Referenced by CWE · observed example (1)
- CWE-433 Unparsed Raw Web Content Delivery weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0383.html Vendor Advisory
- http://www.iss.net/security_center/static/8950.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4612 Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0383.html Vendor Advisory
- http://www.iss.net/security_center/static/8950.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4612 Patch, Vendor Advisory