CVE-2002-0614

UNKNOWN

PHP-Survey 20000615 and earlier stores the global

Published Jun 11, 2002

Modified 1 years ago

No fix available

Details

PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server.

References

WEBhttp://archives.neohapsis.com/archives/bugtraq/2002-04/0383.html WEBhttp://www.iss.net/security_center/static/8950.php WEBhttp://www.securityfocus.com/bid/4612 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2002-0614

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

NoneI:N

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:P/I:N/A:N

Ecosystems

Timeline

PublishedJun 11, 2002

ModifiedAug 8, 2024