CVE-2004-2588

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application.

Affected products

Xmb Software Xmb Forum: 1.9_nexus_beta

References

http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html
http://marc.info/?l=bugtraq&m=108032355905265&w=2
http://securitytracker.com/id?1009561
http://www.osvdb.org/4643
http://www.securityfocus.com/bid/9983
https://docs.xmbforum2.com/index.php?title=Security_Issue_History
https://exchange.xforce.ibmcloud.com/vulnerabilities/15656
http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html
http://marc.info/?l=bugtraq&m=108032355905265&w=2
http://securitytracker.com/id?1009561
http://www.osvdb.org/4643
http://www.securityfocus.com/bid/9983

Get alerted when CVE-2004-2588 or the next vulnerability affects your stack