20020924 Information Disclosure with Invision Board installation (fwd)mailing list
http://marc.info/?l=bugtraq&m=103290602609197&w=2 CVE-2002-1149
Invision Board phpinfo.php Information Disclosure Vulnerability
Record summary
CVE-2002-1149 has a selected CVSS score of 5.0.
Description
The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Sep 19, 2024 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
invision_boardBrowse invision_power_services / invision_board | VulnCheck | Version data not supplied | |
References
5invision-phpinfo-information-disclosure(10178)vdb entry
http://www.iss.net/security_center/static/10178.php 3356vdb entry
http://www.osvdb.org/3356 5789vdb entry
http://www.securityfocus.com/bid/5789 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1149