Efiction Security Vulnerabilities and Issues — Efiction CVE List

Lucene search

Efiction ProjectEfiction

2 matches found

CVE•added 2005/12/11 9:3 p.m.•37 views

CVE-2005-4173

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.

5CVSS6.3AI score0.00985EPSS

CVE•added 2005/12/11 9:3 p.m.•31 views

CVE-2005-4172

eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error message.

5CVSS6.2AI score0.00985EPSS