Information disclosure in Peel

CVE-2008-1506

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

Vulnerability class: Information Disclosure

EPSS: 0.024 (82.7th percentile) — read the EPSS interpretation.

Affected products

  • Peel — versions 1.0b, 2.6, 2.7
  • N/a — versions n/a

Weakness classification (CWE)

References