medium5.0Public exploit code
CVE-2004-2374
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the so…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure2004-02-24 · webapps · php · Verified
Impact
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Working Resources Inc. | Badblue | Version 2.40 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/355109
- http://www.securityfocus.com/bid/9737
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15311
- http://www.securityfocus.com/archive/1/355109
- http://www.securityfocus.com/bid/9737
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15311