← Database

CVE-2004-2061

CRITICAL CVSS: 9.8 Published: 2004-07-27 Modified: 2026-06-16

Description

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.

Affected Platforms

Risearch RisearchRisearch Risearch Pro

Weakness Type

CWE-918

References