Vulnerability in Phpcms

CVE-2004-1203

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

  • Phpcms — versions 1.1.9, 1.2.0, 1.2.1
  • N/a — versions n/a

References