Vulnerability in Mambo Site Server

CVE-2002-2247

The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.

EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.

Affected products

Mambo Mambo_site_server — versions 4.0.11
N/a — versions n/a

Weakness classification (CWE)

CWE-16

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)