← Voltar para CVEs

CVE-2004-0130

N/A

Descricao

login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado3/3/2004

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

phpgedview:phpgedview

Referencias

http://securitytracker.com/alerts/2004/Jan/1008844.html(cve@mitre.org)

http://www.netvigilance.com/advisory0001(cve@mitre.org)

http://www.osvdb.org/6886(cve@mitre.org)

http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/15128(cve@mitre.org)

http://securitytracker.com/alerts/2004/Jan/1008844.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.netvigilance.com/advisory0001(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/6886(af854a3a-2127-422b-91ae-364da2661108)

http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/15128(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.