CVE-2004-1953

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message

published May 10, 2005

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03302 · 88.5th percentile
Published
2005-05-10T04:00Z
EPSS history
Timeline
  • 10 MAY 04:00Z
    phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message
    cvelistv5