CVE

Id
6427  
CVE No.
CVE-2002-2045  
Status
Candidate  
Description
x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.  
Phase
Assigned (20050714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
36466 6427 CVE-2002-2045 VULN-DEV:20020313 X_holes  View
36467 6427 CVE-2002-2045 URL:http://seclists.org/lists/vuln-dev/2002/Mar/0156.html  View
36468 6427 CVE-2002-2045 MISC:http://www.ifrance.com/kitetoua/tuto/x_holes.txt  View
36469 6427 CVE-2002-2045 BID:4279  View
36470 6427 CVE-2002-2045 URL:http://www.securityfocus.com/bid/4279  View
36471 6427 CVE-2002-2045 BID:4280  View
36472 6427 CVE-2002-2045 URL:http://www.securityfocus.com/bid/4280  View
36473 6427 CVE-2002-2045 SECTRACK:1003827  View
36474 6427 CVE-2002-2045 URL:http://securitytracker.com/id?1003827  View
36475 6427 CVE-2002-2045 XF:xstat-action-reveal-path(8466)  View
36476 6427 CVE-2002-2045 URL:http://xforce.iss.net/xforce/xfdb/8466  View
36477 6427 CVE-2002-2045 XF:xstat-phpinfo-reveal-info(8467)  View

Related JVN