CVE-2004-2061

Опубликовано: 27 июл. 2004

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.

Ссылки

http://marc.info/?l=bugtraq&m=109095196526490&w=2
Mailing List
http://secunia.com/advisories/12173
Broken Link
Vendor Advisory
http://securitytracker.com/id?1010788
Broken Link
Third Party Advisory
VDB Entry
http://www.osvdb.org/8265
Broken Link
http://www.osvdb.org/8266
Broken Link
http://www.securityfocus.com/bid/10812
Broken Link
Exploit
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16817
Third Party Advisory
VDB Entry
http://marc.info/?l=bugtraq&m=109095196526490&w=2
Mailing List
http://secunia.com/advisories/12173
Broken Link
Vendor Advisory
http://securitytracker.com/id?1010788
Broken Link
Third Party Advisory
VDB Entry
http://www.osvdb.org/8265
Broken Link
http://www.osvdb.org/8266
Broken Link
http://www.securityfocus.com/bid/10812
Broken Link
Exploit
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16817
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:risearch:risearch:1.0.01:*:*:*:*:*:*:*

cpe:2.3:a:risearch:risearch_pro:3.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.15542

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-918

Связанные уязвимости

GHSA-jpc9-rmm6-c6xg