CVE-2004-2039: Medium severity e107 e107 vulnerability
Published May 29, 2004
·Updated
e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) altnews.php, (2) backendmenu.php, (3) clockmenu.php, (4) countermenu.php, (5) loginmenu.php, and other files, which reveal the full path in a PHP error message.
Affected Software
2 affected components
e107 e107=0.6_15
e107 e107=0.6_15a
Remediation
Patch Available
Patch Available
Event History
May 29, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2039?
CVE-2004-2039 is classified as a moderate severity vulnerability due to the exposure of sensitive information.
2
How do I fix CVE-2004-2039?
To fix CVE-2004-2039, upgrade to a version of e107 that is not affected, ideally newer than 0.6_15a.
3
What type of vulnerability is CVE-2004-2039?
CVE-2004-2039 is an information disclosure vulnerability that allows attackers to obtain sensitive information.
4
What systems are affected by CVE-2004-2039?
CVE-2004-2039 affects e107 CMS versions 0.6_15 and 0.6_15a.
5
What information can be disclosed through CVE-2004-2039?
Through CVE-2004-2039, attackers can disclose the full server path via PHP error messages.