Lucene search

MitreCVE-2004-1504

HistoryFeb 19, 2005 - 5:00 a.m.

CVE-2004-1504

2005-02-1905:00:00

mitre

web.nvd.nist.gov

cve-2004-1504

jaf cms

information disclosure

config.php

remote attack

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php.

Affected configurations

Nvd

Node

salims_softhousejaf_cmsMatch3.0rc

VendorProductVersionCPE
salims_softhousejaf_cms3.0cpe:2.3:a:salims_softhouse:jaf_cms:3.0:rc:*:*:*:*:*:*

Vendor	Product	Version	CPE
salims_softhouse	jaf_cms	3.0	cpe:2.3:a:salims_softhouse:jaf_cms:3.0:rc::::::

References

echo.or.id/adv/adv08-y3dips-2004.txt

marc.info/?l=bugtraq&m=110004150430309&w=2

exchange.xforce.ibmcloud.com/vulnerabilities/18006

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

Related for CVE-2004-1504