CVE-2004-1600 index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| coolphp | = 1.0_stable | No fix listed |
References
- 20041016 Multiple Vulnerabilities in CoolPHP mailing-list
- 12850 exploit third-party-advisory vendor-advisory
- 1011748 exploit vdb-entry vendor-advisory
- coolphp-path-disclosure(17744) vdb-entry