CVE-2002-0614

UNKNOWN

PHP-Survey 20000615 and earlier stores the global

Published Jun 11, 2002

Modified 1 years ago

Details

PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server.

References

WEB

http://archives.neohapsis.com/archives/bugtraq/2002-04/0383.html

WEB

http://www.iss.net/security_center/static/8950.php

WEB

http://www.securityfocus.com/bid/4612

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2002-0614

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

NoneI:N

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:P/I:N/A:N

Ecosystems

Timeline

PublishedJun 11, 2002

ModifiedAug 8, 2024