CVE-2004-2061

Description

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16817

http://marc.info/?l=bugtraq&m=109095196526490&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3