CVE-2004-2374 in BadBlue

Summary

BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

08/16/2005

Disclosure

12/31/2004

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-200

Exploit

Download

CVSS

5.3

EPSS

0.03447

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2374
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2374
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2374/