CVE-2004-2588

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application.

Affected (1)

Products: Xmb Software: Xmb Forum

Xmb Software

1 product

Xmb Forum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xmb Software Xmb Forum	Version 1.9_nexus_beta

References (14)

http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html

Source: cve@mitre.org

Vendor Advisory

http://marc.info/?l=bugtraq&m=108032355905265&w=2

Source: cve@mitre.org

http://securitytracker.com/id?1009561

Source: cve@mitre.org

http://www.osvdb.org/4643

Source: cve@mitre.org

http://www.securityfocus.com/bid/9983

Source: cve@mitre.org

https://docs.xmbforum2.com/index.php?title=Security_Issue_History

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/15656

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html