Lucene search
HistoryJul 14, 2005 - 4:00 a.m.
CVE-2002-2045
cve-2002-2045
x-stat
php commands
remote attackers
web server:path leakage
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.6 High
AI Score
Confidence
Low
0.015 Low
EPSS
Percentile
87.2%
x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.
Affected configurations
Node
xqusx-statMatch2.2
ORxqusx-statMatch2.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| xqus:x-stat | xqus x-stat | eq | 2.2 |
| xqus:x-stat | xqus x-stat | eq | 2.3 |
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.6 High
AI Score
Confidence
Low
0.015 Low
EPSS
Percentile
87.2%
Related for CVE-2002-2045