CVE-2004-1504

State: Published
Severity: Not scored
Published: Feb 19, 2005
Updated: Aug 8, 2024
Reserved: Feb 18, 2005

Description

The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://echo.or.id/adv/adv08-y3dips-2004.txt
jaf-cms-path-disclosure(18006)vdb-entry
20041109 Vulnerabilities in JAF CMSmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.