CVE-2008-4207

Published: Sep 24, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information.

Affected (1)

Products: Attachmax: Dolphin

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Attachmax Dolphin	Version 2.1.0

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (14)

http://e-rdc.org/v1/news.php?readmore=108

Source: cve@mitre.org

Exploit

http://osvdb.org/48271

Source: cve@mitre.org

http://secunia.com/advisories/31794

Source: cve@mitre.org

http://securityreason.com/securityalert/4307

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/496427/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/31207

Source: cve@mitre.org

Exploit

https://www.exploit-db.com/exploits/6468

Source: cve@mitre.org

http://e-rdc.org/v1/news.php?readmore=108

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://osvdb.org/48271

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31794

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/4307

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/496427/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31207

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://www.exploit-db.com/exploits/6468

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.