CVEvulnerability
CVE-2004-2061
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2004-07-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-918
Description
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
Affected configurations
• risearch risearch 1.0.01
• risearch risearch pro 3.2.6
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- http://marc.info/?l=bugtraq&m=109095196526490&w=2 Mailing List
- http://secunia.com/advisories/12173 Broken Link, Vendor Advisory
- http://securitytracker.com/id?1010788 Broken Link, Third Party Advisory, VDB Entry
- http://www.osvdb.org/8265 Broken Link
- http://www.osvdb.org/8266 Broken Link
- http://www.securityfocus.com/bid/10812 Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16817 Third Party Advisory, VDB Entry
- http://marc.info/?l=bugtraq&m=109095196526490&w=2 Mailing List
- http://secunia.com/advisories/12173 Broken Link, Vendor Advisory
- http://securitytracker.com/id?1010788 Broken Link, Third Party Advisory, VDB Entry
- http://www.osvdb.org/8265 Broken Link
- http://www.osvdb.org/8266 Broken Link
- http://www.securityfocus.com/bid/10812 Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16817 Third Party Advisory, VDB Entry