NVD

Id
80996  
Name
CVE-2002-2045  
Description
x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-07-18  
Published
2002-12-31  
Modified Date
2017-07-10  
Seq
2002-2045  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
402915 80996 CVE-2002-2045 20020313 X_holes  View
402916 80996 CVE-2002-2045 1003827  View
402917 80996 CVE-2002-2045 http://www.ifrance.com/kitetoua/tuto/x_holes.txt  View
402918 80996 CVE-2002-2045 4279  View
402919 80996 CVE-2002-2045 4280  View
402920 80996 CVE-2002-2045 xstat-action-reveal-path(8466)  View
402921 80996 CVE-2002-2045 xstat-phpinfo-reveal-info(8467)  View

Related JVN