CVE: CVE-2004-2061

Export to Word

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.17394
Percentile: 0.94752

CVSS Scoring

CVSS v3.1 Score: 9.8

Severity: CRITICAL

Mapped CWE(s)

CWE-918 : Server-Side Request Forgery (SSRF)

All CAPEC(s)

CAPEC-664: Server Side Request Forgery

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

Affected Products

cpe:2.3:a:risearch:risearch:1.0.01:*:*:*:*:*:*:*
cpe:2.3:a:risearch:risearch_pro:3.2.6:*:*:*:*:*:*:*

← Back to Home