What is CVE-2002-1149?

CVE-2002-1149 is a vulnerability in Invision Power Services Board. Published 2002-10-11.

Is CVE-2002-1149 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Invision Power Services Board

CVE-2002-1149

The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

Affected products

Invision_power_services Invision_board — versions 1.0, 1.0.1
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2002-1149?: CVE-2002-1149 is a vulnerability in Invision Power Services Board. Published 2002-10-11.
Is CVE-2002-1149 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.