CVEvulnerability
CVE-2004-2671
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error messages, as demonstrated by the (1) mod and (2) cid parameters.
Affected configurations
• endonesia endonesia 8.3
References
- http://echo.or.id/adv/adv02-y3dips-2004.txt Exploit, Vendor Advisory
- http://secunia.com/advisories/12231 Vendor Advisory
- http://securitytracker.com/id?1010864 Vendor Advisory
- http://www.securityfocus.com/archive/1/370855 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/8507 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13042 exchange.xforce.ibmcloud.com
- http://echo.or.id/adv/adv02-y3dips-2004.txt Exploit, Vendor Advisory
- http://secunia.com/advisories/12231 Vendor Advisory
- http://securitytracker.com/id?1010864 Vendor Advisory
- http://www.securityfocus.com/archive/1/370855 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/8507 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13042 exchange.xforce.ibmcloud.com