CVE-2004-2039: e107

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) alt_news.php, (2) backend_menu.php, (3) clock_menu.php, (4) counter_menu.php, (5) login_menu.php, and other files, which reveal the full path in a PHP error message.

Affected products

• e107 e107: version 0.6_15 only; version 0.6_15a only

Published 2004-05-29. Last modified 2026-06-16.