CVE-2004-2374 BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML.
MediumCVSS 5.0
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| working resources inc badblue | = 2.40 | No fix listed |
References
- 20040224 BadBlue 2.4 Local Path Disclosure By phptest.php exploit mailing-list vendor-advisory
- 9737 exploit vdb-entry
- badblue-phptestphp-path-disclosure(15311) vdb-entry