CVE-2002-2247 in Site Server

Summary

The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 10/14/2007
• Disclosure: 12/31/2002
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-16 (Confirmed)
• Exploit: Download
• CVSS: 5.3
• EPSS: 0.05491
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2247
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2247
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2247/