← All advisories

Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026

CVE-2002-2289

CVE-2002-2289

Description

soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Working Resources Inc./Badblue2 versions
cpe:2.3:a:working_resources_inc.:badblue:1.7.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:working_resources_inc.:badblue:1.7.1:*:*:*:*:*:*:*
- (no CPE)range: = 1.7.1

Patches

Vulnerability mechanics

References

5

online.securityfocus.com/archive/1/300992nvdExploit
securityreason.com/securityalert/3243nvdExploit
www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0329.htmlnvdExploit
www.securityfocus.com/bid/6243nvd
exchange.xforce.ibmcloud.com/vulnerabilities/10690nvd

News mentions

0

No linked articles in our index yet.