CVE-2004-2061 RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or...
CriticalCVSS 9.8
EPSS 5.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| risearch | = 1.0.01 | No fix listed |
| risearch pro | = 3.2.6 | No fix listed |
References
- 20040727 IRM 009: RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vulnerabilities mailing-list
- 12173 broken-link third-party-advisory vendor-advisory
- 1010788 broken-link third-party-advisory vdb-entry
- 8265 broken-link vdb-entry
- 8266 broken-link vdb-entry
- 10812 broken-link exploit third-party-advisory vdb-entry vendor-advisory
- risearch-show-open-proxy(16817) third-party-advisory vdb-entry