CVE-2004-2671

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error messages, as demonstrated by the (1) mod and (2) cid parameters.

Affected (1)

Products: Endonesia: Endonesia

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Endonesia Endonesia	Version 8.3

References (12)

http://echo.or.id/adv/adv02-y3dips-2004.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/12231

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1010864

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/370855

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/8507

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/13042

Source: cve@mitre.org

http://echo.or.id/adv/adv02-y3dips-2004.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://secunia.com/advisories/12231

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1010864

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/370855

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/bid/8507

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/13042

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.