Vulnerability Details : CVE-2004-0662
PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error message.
Exploit prediction scoring system (EPSS) score for CVE-2004-0662
Probability of exploitation activity in the next 30 days: 0.76%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 79 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2004-0662
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2004-0662
Products affected by CVE-2004-0662
- cpe:2.3:a:powerportal:powerportal:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:powerportal:powerportal:1.3b:*:*:*:*:*:*:*
- cpe:2.3:a:powerportal:powerportal:1.1b:*:*:*:*:*:*:*