CVE-2004-2061: Risearch

Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days.

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.

Affected products

• Risearch Risearch: version 1.0.01 only
• Risearch Risearch Pro: version 3.2.6 only

Published 2004-07-27. Last modified 2026-06-16.