CVE-2004-2374: Working Resources Inc. Badblue

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML.

Affected products

• Working Resources Inc. Badblue: version 2.40 only

Published 2004-12-31. Last modified 2026-06-16.