Description
Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message.
Exploits (1)
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10856
Exploit, Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/6387
Exploit mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html
Scores
EPSS
0.0527
EPSS Percentile
90.0%
Details
CWE
CWE-200
Status
published
Products (1)
mambo/site_server
4.0.11
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026