CVE-2004-2664

John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB_DIR, which reveals the installation path in an error message.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-09-16

Affected products

• Adodb (John Lim)

References

• http://phplens.com/lens/adodb/docs-adodb.htm#changes