What’s Vulnerable › Vulnerabilities

CVE-2004-2061

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-07-27 · updated 2026-06-16
• Weakness: CWE-918

Description

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.

Affected products

• Risearch: 1.0.01
• Risearch Pro: 3.2.6

References

• http://marc.info/?l=bugtraq&m=109095196526490&w=2
• http://secunia.com/advisories/12173
• http://securitytracker.com/id?1010788
• http://www.osvdb.org/8265
• http://www.osvdb.org/8266
• http://www.securityfocus.com/bid/10812
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16817
• http://marc.info/?l=bugtraq&m=109095196526490&w=2
• http://secunia.com/advisories/12173
• http://securitytracker.com/id?1010788
• http://www.osvdb.org/8265
• http://www.osvdb.org/8266

Get alerted when CVE-2004-2061 or the next vulnerability affects your stack