Signature Detail
Short Name |
HTTP:INFO-LEAK:CUTENEWS |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Release Date |
2005/01/07 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: CuteNews Debug Information Disclosure
This signature detects attempts to exploit a known vulnerability in CuteNews 1.3, a news management system. Attackers can send a debug query to obtain information that was returned from a call to the phpinfo() function.
Extended Description
An information disclosure weakness has been reported in CuteNews 1.3, that may expose sensitive server configuration data. The problem occurs due to CuteNews accepting a debug query that will result in the exposure of information returned from a call to the phpinfo() function. A malicious person could potentially use information harvested through the exploitation this type of issue to launch future attacks against a target system.
Affected Products
- CutePHP CuteNews 1.3.0
References