CVE-2004-2374

2005-08-1604:00:00

mitre

www.cve.org

AI Score

6.5

Confidence

Low

EPSS

0.014

Percentile

86.7%

JSON

BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML.

References

www.securityfocus.com/archive/1/355109

www.securityfocus.com/bid/9737

exchange.xforce.ibmcloud.com/vulnerabilities/15311