medium5.0
CVE-2002-2289
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.
Impact
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Working Resources Inc. | Badblue | Version 1.7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/300992
- http://securityreason.com/securityalert/3243
- http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0329.html
- http://www.securityfocus.com/bid/6243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10690
- http://online.securityfocus.com/archive/1/300992
- http://securityreason.com/securityalert/3243
- http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0329.html
- http://www.securityfocus.com/bid/6243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10690