CVE-2004-2671: mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct request...

Security readout for executives and security teams

CVE-2004-2671 is an old information disclosure issue in eNdonesia CMS 8.3. Certain direct or malformed requests to mod.php can expose local filesystem paths in error messages. That information is usually not damaging by itself, but it can help an attacker map the server for later attacks. Exposure is likely limited to organizations still running eNdonesia CMS 8.3 with mod.php reachable from untrusted networks. The bundle does not identify other affected versions or products. Low standalone urgency, but prioritize remediation if the CMS is internet-facing, unsupported, or hosted with sensitive applications. The main business risk is attacker reconnaissance against legacy infrastructure. Mitigation focus: Inventory public sites for eNdonesia CMS 8.3 usage.; Check vendor or archived advisory guidance for a supported remediation path.; Remove or isolate obsolete eNdonesia 8.3 instances where no fix is available..

Prepared

Jun 29, 2026, 08:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.