CVE-2004-1504 in JAF CMS

Zusammenfassung

von MITRE

The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservieren: 18.02.2005
• Veröffentlichung: 31.12.2004
• Moderieren: akzeptiert
• Eintrag: VDB-22787
• CPE: bereit
• CWE: CWE-200 (bestätigt)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01550
• KEV: nein
• Aktivitäten: very low
• Sektor: Hostingprovider, Lawfirm, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1504
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1504
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1504/