Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2003-1181 | First vendor Publication | 2003-10-25 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1181 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 3292 | Advanced Poll info.php System Information Disclosure The PHP web application, Advanced Poll, contains a flaw that may allow a malicious user to sensitive information about the server. The issue is triggered when a request is made to the misc/info.php script that is included with a standard installation. This script simply executes the phpinfo() function and displays the results. It is possible that the flaw may allow an unauthorized remote user to view server path information, environment variables, and internal version numbers of installed libraries. |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Advanced Poll popup.php access RuleID : 2303-community - Revision : 16 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll popup.php access RuleID : 2303 - Revision : 16 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll poll_ssi.php access RuleID : 2302-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll poll_ssi.php access RuleID : 2302 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll booth.php access RuleID : 2301-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll booth.php access RuleID : 2301 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_tpl_new.php access RuleID : 2300-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_tpl_new.php access RuleID : 2300 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_tpl_misc_new.php access RuleID : 2299-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_tpl_misc_new.php access RuleID : 2299 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_templates.php access RuleID : 2298-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_templates.php access RuleID : 2298 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_templates_misc.php access RuleID : 2297-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_templates_misc.php access RuleID : 2297 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_stats.php access RuleID : 2296-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_stats.php access RuleID : 2296 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_settings.php access RuleID : 2295-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_settings.php access RuleID : 2295 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_preview.php access RuleID : 2294-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_preview.php access RuleID : 2294 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_password.php access RuleID : 2293-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_password.php access RuleID : 2293 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_logout.php access RuleID : 2292-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_logout.php access RuleID : 2292 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_license.php access RuleID : 2291-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_license.php access RuleID : 2291 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_help.php access RuleID : 2290-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_help.php access RuleID : 2290 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_embed.php access RuleID : 2289-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_embed.php access RuleID : 2289 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_edit.php access RuleID : 2288-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_edit.php access RuleID : 2288 - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_comment.php access RuleID : 2287-community - Revision : 17 - Type : SERVER-WEBAPP |
| 2014-01-10 | Advanced Poll admin_comment.php access RuleID : 2287 - Revision : 17 - Type : SERVER-WEBAPP |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2003-03-27 | Name : The remote web server contains a PHP script that is affected by an informatio... File : advanced_poll_phpinfo.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:23:21 |
|
| 2024-11-28 12:05:49 |
|
| 2021-05-04 12:02:11 |
|
| 2021-04-22 01:02:19 |
|
| 2020-05-23 00:15:35 |
|
| 2017-07-11 12:01:20 |
|
| 2016-06-28 15:03:27 |
|
| 2016-04-26 12:41:03 |
|
| 2014-02-17 10:26:51 |
|
| 2014-01-19 21:22:04 |
|
| 2013-05-11 11:54:11 |
|
