CVE-2004-2588

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-25895.0Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes CVE-2004-259010.0Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, related to regular expres CVE-2004-25912.1The data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite data in files, which allows attackers to recov CVE-2004-25925.0Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a mo CVE-2004-25937.5Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause CVE-2004-25945.0Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to re CVE-2004-25955.0Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to caus CVE-2004-25965.0Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection sl CVE-2004-25975.0Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo st CVE-2004-25985.0Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by ex CVE-2004-25992.1Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service (appl CVE-2004-26005.0The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authenticat